CVE-2026-22752 - Vulnerability Details - OpenCVE

Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00493.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

No data.

References

Link	Providers
https://spring.io/security/cve-2026-22752

History

Thu, 16 Jul 2026 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 16 Jul 2026 09:30:00 +0000

Type	Values Removed	Values Added
Description		Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.
Title		Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata
References		https://spring.io/security/cve-2026-22752
Metrics		cvssV3_1 `{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N'}`

MITRE

Status: PUBLISHED

Assigner: vmware

Published: 2026-07-16T08:40:23.009Z

Updated: 2026-07-16T12:16:22.917Z

Reserved: 2026-01-09T06:55:03.990Z

Link: CVE-2026-22752

Vulnrichment

Updated: 2026-07-16T12:16:15.955Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-22752", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "state": "PUBLISHED", "assignerShortName": "vmware", "dateReserved": "2026-01-09T06:55:03.990Z", "datePublished": "2026-07-16T08:40:23.009Z", "dateUpdated": "2026-07-16T12:16:22.917Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2026-07-16T08:40:23.009Z"}, "title": "Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata", "affected": [{"vendor": "Spring Security", "product": "Spring Authorization Server", "versions": [{"status": "affected", "version": "7.0.0", "lessThanOrEqual": "7.0.4", "versionType": "custom"}, {"status": "affected", "version": "1.5.0", "lessThanOrEqual": "1.5.6", "versionType": "custom"}, {"status": "affected", "version": "1.4.0", "lessThanOrEqual": "1.4.9", "versionType": "custom"}, {"status": "affected", "version": "1.3.0", "lessThanOrEqual": "1.3.10", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server.\n\nThis issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server.<p>This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.</p>"}]}], "references": [{"url": "https://spring.io/security/cve-2026-22752"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "CRITICAL", "baseScore": 9.6, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N"}}], "source": {"advisory": "https://spring.io/security/cve-2026-22752", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-16T12:15:31.051109Z", "id": "CVE-2026-22752", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-16T12:16:22.917Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-22752", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-16T12:15:31.051109Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-16T12:16:15.955Z"}}], "cna": {"title": "Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata", "source": {"advisory": "https://spring.io/security/cve-2026-22752", "discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Spring Security", "product": "Spring Authorization Server", "versions": [{"status": "affected", "version": "7.0.0", "versionType": "custom", "lessThanOrEqual": "7.0.4"}, {"status": "affected", "version": "1.5.0", "versionType": "custom", "lessThanOrEqual": "1.5.6"}, {"status": "affected", "version": "1.4.0", "versionType": "custom", "lessThanOrEqual": "1.4.9"}, {"status": "affected", "version": "1.3.0", "versionType": "custom", "lessThanOrEqual": "1.3.10"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://spring.io/security/cve-2026-22752"}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server.\n\nThis issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.", "supportingMedia": [{"type": "text/html", "value": "Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server.<p>This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.</p>", "base64": false}]}], "providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2026-07-16T08:40:23.009Z"}}}, "cveMetadata": {"cveId": "CVE-2026-22752", "state": "PUBLISHED", "dateUpdated": "2026-07-16T12:16:22.917Z", "dateReserved": "2026-01-09T06:55:03.990Z", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "datePublished": "2026-07-16T08:40:23.009Z", "assignerShortName": "vmware"}, "dataVersion": "5.2"}