CVE-2026-41849

An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). An attacker can exploit this by supplying a specially crafted SpEL expression that triggers excessive resource consumption, resulting in a Denial of Service (DoS). Affected versions: Spring Framework 5.3.0 through 5.3.48.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://spring.io/security/cve-2026-41849	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*

History

23 Jul 2026, 08:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de desbordamiento de entero existe en la lógica de evaluación de Spring Expression Language (SpEL). Un atacante puede explotar esto al proporcionar una expresión SpEL especialmente diseñada que desencadena un consumo excesivo de recursos, lo que resulta en una denegación de servicio (DoS). Versiones afectadas: Spring Framework 5.3.0 hasta 5.3.48.

09 Jun 2026, 20:36

Type	Values Removed	Values Added
CPE		cpe:2.3:a:vmware:spring_framework::::::::
References	~~() https://spring.io/security/cve-2026-41849 -~~	() https://spring.io/security/cve-2026-41849 - Vendor Advisory
First Time		Vmware Vmware spring Framework

09 Jun 2026, 05:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-09 05:16

Updated : 2026-07-23 08:10

NVD link : CVE-2026-41849

Mitre link : CVE-2026-41849

CVE.ORG link : CVE-2026-41849

JSON object : View

Products Affected

vmware

spring_framework

CWE

CWE-190

Integer Overflow or Wraparound

{"id": "CVE-2026-41849", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-41849", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-09T13:32:54.979277Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@vmware.com", "affectedData": [{"vendor": "Spring", "product": "Spring Framework", "versions": [{"status": "affected", "version": "5.3.0", "lessThan": "5.3.49", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-09T05:16:37.060", "references": [{"url": "https://spring.io/security/cve-2026-41849", "tags": ["Vendor Advisory"], "source": "security@vmware.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@vmware.com", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). An attacker can exploit this by supplying a specially crafted SpEL expression that triggers excessive resource consumption, resulting in a Denial of Service (DoS).\n\nAffected versions:\nSpring Framework 5.3.0 through 5.3.48."}, {"lang": "es", "value": "Una vulnerabilidad de desbordamiento de entero existe en la l\u00f3gica de evaluaci\u00f3n de Spring Expression Language (SpEL). Un atacante puede explotar esto al proporcionar una expresi\u00f3n SpEL especialmente dise\u00f1ada que desencadena un consumo excesivo de recursos, lo que resulta en una denegaci\u00f3n de servicio (DoS).\n\nVersiones afectadas:\nSpring Framework 5.3.0 hasta 5.3.48."}], "lastModified": "2026-07-23T08:10:00.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:spring_framework:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9394F974-169E-4FB0-A85B-0114477DE421", "versionEndExcluding": "5.3.49", "versionStartIncluding": "5.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@vmware.com"}