Login Request a demo
SP
Product
spring-boot-admin
by codecentric · last CVE Jul 13, 2026
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 2Medium 0Low 0
Severity
All severities3Critical1High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add spring-boot-admin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-62242
8.6
0%
Jul 13
Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration
Affected: before 4.1.2
CVE-2023-38286
7.5
1%
Jul 14
Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML
Affected: through 3.1.0
Showing 2