CVE-2026-59315

Published September 3, 2026

CVSS 3.15.3

SeverityMedium

Known exploitedNo

The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads.
Spring Cloud Config 5.0.0 – 5.0.4
Spring Cloud Config 4.3.0 – 4.3.4
Spring Cloud Config 4.0.0 – 4.2.8
Spring Cloud Config 3.1.14 and earlier

NVD references:

https://spring.io/security/cve-2026-59315

Primary source: NIST National Vulnerability Database

Stay Ahead of the Threat Landscape