Description
An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbound adapter can cause the server to emit an outbound UDP datagram to an arbitrary internal or external host and port of the attacker's choosing.
Spring Integration 7.1.0
Spring Integration 7.0.0 - 7.0.5
Spring Integration 6.5.0 - 6.5.10
Spring Integration 6.4.0 - 6.4.12
Spring Integration 5.5.21 and earlier
Published: 2026-08-26
Score: 6.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://spring.io/security/cve-2026-47861 cve-icon cve-icon
History

Thu, 27 Aug 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-918

Thu, 27 Aug 2026 02:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-760
CWE-777

Thu, 27 Aug 2026 01:45:00 +0000

Type Values Removed Values Added
First Time appeared Spring
Spring spring Integration
Vendors & Products Spring
Spring spring Integration

Thu, 27 Aug 2026 00:30:00 +0000

Type Values Removed Values Added
Description An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbound adapter can cause the server to emit an outbound UDP datagram to an arbitrary internal or external host and port of the attacker's choosing. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier
Title UDP adapter sends ack to attacker-supplied host:port parsed from packet body, even when acknowledge=false
References
Metrics cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'}

Subscriptions

Spring Spring Integration
cve-icon MITRE

Status: PUBLISHED

Assigner: vmware

Published:

Updated: 2026-08-27T13:14:00.079Z

Reserved: 2026-05-20T10:00:55.156Z

Link: CVE-2026-47861

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-27T01:17:33.157

Modified: 2026-08-27T17:18:31.773

Link: CVE-2026-47861

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-27T02:00:14Z

Weaknesses
  • CWE-760

    Use of a One-Way Hash with a Predictable Salt

  • CWE-777

    Regular Expression without Anchors

  • CWE-918

    Server-Side Request Forgery (SSRF)