SC
Product
Spring Cloud Gateway
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Spring Cloud Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47879 | 8.7 | Aug 27 | Spring Cloud Gateway SSRF and native file access with gRPC Affected: before 3.1.14; 4.0.0 before 4.2.10; 4.3.0 before 4.3.6; 5.0.0 before 5.0.3 |
| CVE-2026-47825 | 8.6 | Jun 15 | Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies in certain situations Affected: through 3.1.10; 4.0.0 before 4.1.13; 4.2.0 before 4.2.9; 4.3.0 before 4.3.4.1; 5.0.0 before 5.0.1.1 |
| CVE-2026-22750 | 7.5 | Apr 10 | SSL bundle configuration silently bypassed in Spring Cloud Gateway Affected: 4.2.0 before 4.2.1 |
Showing 3