CVE-2026-47834

6.5 mediumEPSS 0.3%

Medium (6.5) in vmware spring data jpa. EPSS 0.3% chance of exploitation in the next 30 days.

Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
Published: 2026-08-26
Modified: 2026-09-04
Record from: the NVD, synced 2026-10-19

Affected

vmware:spring_data_jpa

References

https://spring.io/security/cve-2026-47834

Check your stack JSON