PT-2026-34550 · Vmware · Spring Authorization Server

Published 2026-04-22 · Updated 2026-04-30 · CVE-2026-22752

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Spring Authorization Server (affected versions not specified)

Description A critical flaw in Spring Authorization Server allows for Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), and privilege escalation.

Recommendations Disable Dynamic Client Registration to reduce risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-22752

Affected Products

Spring Authorization Server

References · 5

• https://twitter.com/UpwindMDR/status/2048297183787581607 · Twitter Post
• https://twitter.com/cybrsecpath/status/2048273892838641873 · Twitter Post
• https://twitter.com/cybrsecpath/status/2046991750217322919 · Twitter Post
• https://twitter.com/CyberTech_In/status/2047291628193481067 · Twitter Post
• https://twitter.com/integ_sec/status/2049853905148731822 · Twitter Post