CVE-2026-59277

EUVD-2026-67169
Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal (private) or external (public) network.
Spring Security 7.1.0
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 19.65%
Affected Products (NVD)
VendorProductVersion
vmwarespring_security
7.1.0 ≤
𝑥
< 7.1.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://spring.io/security/cve-2026-59277