CVE-2026-41847

score

<0.1

cvss

4.8

epss

0.3%

published

2026-06-09

kev added

—

first seen

2026-10-21

Spring Framework 5.3.0 through 5.3.48 contains a security bypass caused by improper handling in Kotlin Router DSL in Spring WebFlux applications, letting attackers bypass security controls, exploit requires use of Kotlin Router DSL.