THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-22752 (CRITICAL 9.6) — Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.

[NVD] CVE-2026-22752 (CRITICAL 9.6) — Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.

lownvdPublished 2026-07-16

CVE-2026-22752 CVSS: 9.6 CRITICAL Published: 2026-07-16T10:16:24.767

Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server.

This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.

Indicators of compromise

CVE-2026-22752cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-22752