CVE-2026-22740

6.5 Moyenne

Publiée le 29/04/2026 à 14:16 · Modifiée le 17/06/2026 à 12:20 · Analysée par le NVD · Source : security@vmware.com

Description

A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space. Older, unsupported versions are also affected.

Traduire en français

Produits concernés

VMware Spring Framework

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	security@vmware.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-400

Références

https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H&version=3.1 US Government Resource
https://spring.io/security/cve-2026-22740 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories