IT

Tracker / CVE-2026-47861

CVE-2026-47861

Medium 6.3

An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbound adapter can cause the server to emit an outbound UDP datagram to an arbitrary internal or external host and port of the attacker's choosing. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier

Affected products and versions

vmware spring_integration · … → 5.5.22
vmware spring_integration · 6.4.0 → 6.4.13
vmware spring_integration · 6.5.0 → 6.5.11
vmware spring_integration · 7.0.0 → 7.0.5.1
vmware spring_integration · 7.1.0 → 7.1.0.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References