CVE-2026-22740: Spring Framework DoS with Multipart Temp Files in WebFlux

Published Apr 29, 2026
·
Updated

A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This allows an attacker to consume available disk space.

Older, unsupported versions are also affected.

Affected Software

5 affected components
VMware Spring Framework
VMware Spring Framework<5.3.48
VMware Spring Framework>=6.1.0<6.1.27
VMware Spring Framework>=6.2.0<6.2.18
VMware Spring Framework>=7.0.0<7.0.7

Event History

Apr 29, 2026
CVE Published
via MITRE·10:46 AM
Data Sourced
via MITRE·10:46 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:16 PM
DescriptionSeverityWeaknessAffected Software
Aug 5, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-22740?

CVE-2026-22740 has a high severity rating due to its potential to cause Denial of Service (DoS) attacks.

2

How do I fix CVE-2026-22740?

To fix CVE-2026-22740, ensure that you are using the latest version of the Spring Framework which contains the necessary patches.

3

What type of applications are affected by CVE-2026-22740?

CVE-2026-22740 affects WebFlux server applications that process multipart requests.

4

What impact does CVE-2026-22740 have on an application?

CVE-2026-22740 allows an attacker to potentially exhaust system resources by leaving temporary files after processing multipart requests.

5

Is CVE-2026-22740 an environment-specific vulnerability?

CVE-2026-22740 is not environment-specific and can affect any WebFlux server application using the vulnerable versions of the Spring Framework.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203