CVE-2026-47836
published 2026-08-26CVE-2026-47836: The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to…
PriorityP344high8.1CVSS 3.1
AVNACHPRNUINSUCHIHAH
EPSS
0.22%
11.5th percentile
The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.
Spring Cloud Config 5.0.0 - 5.0.4
Spring Cloud Config 4.3.0 - 4.3.4
Spring Cloud Config 4.0.0 - 4.2.8
Spring Cloud Config 3.1.14 and earlier
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| spring | spring_cloud_config | <= 3.1.14 | — |
| spring | spring_cloud_config | 4.0.0 – 4.2.8 | — |
| spring | spring_cloud_config | 4.3.0 – 4.3.4 | — |
| spring | spring_cloud_config | 5.0.0 – 5.0.4 | — |
| vmware | spring_cloud_config | < 3.1.15 | 3.1.15 |
| vmware | spring_cloud_config | >= 4.0.0 < 4.2.9 | 4.2.9 |
| vmware | spring_cloud_config | >= 4.3.0 < 4.3.5 | 4.3.5 |
| vmware | spring_cloud_config | >= 5.0.0 < 5.0.5 | 5.0.5 |
CVSS provenance
nvdv3.18.1HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_redhat8.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
org.springframework.cloud/spring-cloud-config-server: Spring Cloud Config Server: TOCTOU vulnerability in SVN base directory
vendor_redhat·2026-08-26·CVSS 8.1
CVE-2026-47836 [HIGH] CWE-367 org.springframework.cloud/spring-cloud-config-server: Spring Cloud Config Server: TOCTOU vulnerability in SVN base directory
org.springframework.cloud/spring-cloud-config-server: Spring Cloud Config Server: TOCTOU vulnerability in SVN base directory
The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.
Spring Cloud Config 5.0.0 - 5.0.4
Spring Cloud Config 4.3.0 - 4.3.4
Spring Cloud Config 4.0.0 - 4.2.8
Spring Cloud Config 3.1.14 and earlier
A flaw was found in Spring Cloud Config Server. The base directory used by the server to clone SVN repositories is susceptible to a Time-of-Check Time-of-Use (TOCTOU) attack. A local attacker with high privileges could exploit this vulnerability by manipulating the directory between the security check and its subsequent use. This could lead
VulDB
VMware Spring Cloud Config up to 3.1.14/4.2.8/4.3.4/5.0.4 SVN Cloning toctou (WID-SEC-2026-2952)
vuldb·2026-09-06·CVSS 8.1
CVE-2026-47836 [HIGH] VMware Spring Cloud Config up to 3.1.14/4.2.8/4.3.4/5.0.4 SVN Cloning toctou (WID-SEC-2026-2952)
A vulnerability described as problematic has been identified in VMware Spring Cloud Config up to 3.1.14/4.2.8/4.3.4/5.0.4. The affected element is an unknown function of the component SVN Cloning. Such manipulation leads to time-of-check time-of-use.
This vulnerability is listed as CVE-2026-47836. The attack must be carried out locally. There is no available exploit.
GHSA
The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.
ghsa_unreviewed·2026-08-26
CVE-2026-47836 [HIGH] The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.
The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.
Spring Cloud Config 5.0.0 - 5.0.4
Spring Cloud Config 4.3.0 - 4.3.4
Spring Cloud Config 4.0.0 - 4.2.8
Spring Cloud Config 3.1.14 and earlier
No detection rules found.
No public exploits indexed.
Hackernews
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
blogs_hackernews·2026-08-24
CVE-2026-19478 ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet.
That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder than they actually are.
Plenty to clean up. Here’s the short version.
## ⚡ Threat of the Week
U.S. Warns of AI-Powered Attacks on Siemens PLCs — Threat actors are using AI to write exploit scripts targeting internet-exposed Siemens S7 Series program
Bugzilla
CVE-2026-47836 log4j: Spring Cloud Config Server: TOCTOU vulnerability in SVN base directory [fedora-all]
bugzilla·2026-09-21·CVSS 8.1
CVE-2026-47836 [HIGH] CVE-2026-47836 log4j: Spring Cloud Config Server: TOCTOU vulnerability in SVN base directory [fedora-all]
CVE-2026-47836 log4j: Spring Cloud Config Server: TOCTOU vulnerability in SVN base directory [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.
Spring Cloud Config 5.0.0 - 5.0.4
Spring Cloud Config 4.3.0 - 4.3.4
Spring Cloud Config 4.0.0 - 4.2.8
Spring Cloud Config 3.1.14 and earlier
Bugzilla
CVE-2026-47836 org.springframework.cloud/spring-cloud-config-server: Spring Cloud Config Server: TOCTOU vulnerability in SVN base directory
bugzilla·2026-08-26·CVSS 8.1
CVE-2026-47836 [HIGH] CVE-2026-47836 org.springframework.cloud/spring-cloud-config-server: Spring Cloud Config Server: TOCTOU vulnerability in SVN base directory
CVE-2026-47836 org.springframework.cloud/spring-cloud-config-server: Spring Cloud Config Server: TOCTOU vulnerability in SVN base directory
The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.
Spring Cloud Config 5.0.0 - 5.0.4
Spring Cloud Config 4.3.0 - 4.3.4
Spring Cloud Config 4.0.0 - 4.2.8
Spring Cloud Config 3.1.14 and earlier
2026-08-26
Published