Broadcom Spring Authorization Server vulnerabilities

CVE-2026-22752 [CRITICAL] CWE-287 CVE-2026-22752: Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Serv Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.

CVE-2026-59316 [HIGH] CWE-79 CVE-2026-59316: Spring Authorization Server's default consent page renders user-controlled values without HTML entit Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When using the DefaultConsentPage, an attacker can craft an OAuth2 authorization request containing a malicious value that is stored server-side and later rendered unencoded in the default consent page presented to the end user. Spring Author

CVE-2026-41008 [MEDIUM] CWE-601 CVE-2026-41008: Spring Security Authorization Server's authorization endpoint performs insufficient validation of th Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a malicious authorization request containing an invalid request_uri and an arbitrary, unvalidated redirect_uri, which can lead to an Open Redirect vulnerability. Affected versions: Spring Security 7.0.0

CVE-2026-59355 [MEDIUM] CWE-601 CVE-2026-59355: In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a request containing an invalid request_uri paired with an unvalidated redirect_uri, which can result in an open redirect to an attacker-controlled site.