← العودة للجدول
CVE-2026-41699
CVE-2026-41699 — Spring for GraphQL applications are vulnerable to Unsafe Deserialization when pr
📅 2026-06-11
🟠 High 🔥 No NVD Exploit Vulnerability CVSS 8.1

📋 الوصف الكامل

Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. An attacker can craft a malicious GraphQL request that can lead to Remote Code Execution when the application exposes a paginated (Connection) field and the classpath contains specific classes that can be leveraged during deserialization. Affected versions: Spring for GraphQL 2.0.0

💻 الأنظمة المتأثرة

Spring Framework

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-41699

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v2.0.0

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←