CVE-2026-62242

HIGH 8.6

Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration

CVSS Score

8.6

EPSS Score

0.0%

EPSS Percentile

0th

Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with attacker-controlled healthUrl and managementUrl parameters without validation against private IP ranges or metadata endpoints. Attackers can force the server to make HTTP requests to arbitrary internal addresses and retrieve response bodies via the actuator proxy to exfiltrate cloud credentials.

CWE	CWE-918
Vendor	codecentric
Product	spring-boot-admin
Published	Jul 13, 2026
Last Updated	Jul 15, 2026

Stay Ahead of the Next One

Get instant alerts for codecentric spring-boot-admin

Be the first to know when new high vulnerabilities affecting codecentric spring-boot-admin are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

codecentric / spring-boot-admin

0 < 4.1.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/codecentric/spring-boot-admin/releases/tag/4.1.2 github.com: https://github.com/codecentric/spring-boot-admin/issues/5452 github.com: https://github.com/codecentric/spring-boot-admin/pull/5464 github.com: https://github.com/codecentric/spring-boot-admin/commit/1f991ea013e46360b8f8fb63fe4ad20a9bf0d551 vulncheck.com: https://www.vulncheck.com/advisories/spring-boot-admin-server-ssrf-via-unauthenticated-instance-registration

Credits

George Chen