๐Ÿ” CVE Alert

CVE-2026-47890

UNKNOWN 0.0

Spring Framework Server Sent Event stream corruption while rendering fragments

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fragments. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19

Vendor spring
Product spring framework
Ecosystems
Industries
TechnologyEnterprise
Published Aug 27, 2026
Stay Ahead of the Next One

Get instant alerts for spring spring framework

Be the first to know when new unknown vulnerabilities affecting spring spring framework are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Spring / Spring Framework
7.0.0 โ‰ค 7.0.8 6.2.0 โ‰ค 6.2.19

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
spring.io: https://spring.io/security/cve-2026-47890