CVE-2026-41711: Potential Denial of Service through crafted Sort Parameters

Q: What is the severity of CVE-2026-41711?

CVE-2026-41711 has a medium severity score of 5.9.

Q: What vulnerability does CVE-2026-41711 exploit?

CVE-2026-41711 exploits a potential Denial of Service attack through crafted Sort parameters leading to a StackOverflowException.

Q: Which versions are affected by CVE-2026-41711?

CVE-2026-41711 affects Spring Data Commons versions 4.0.0 through 4.0.5, 3.5.0 through 3.5.11, 3.4.0 through 3.4.14, and 3.3.0 through 3.3.16.

Q: How do I fix CVE-2026-41711?

To fix CVE-2026-41711, upgrade Spring Data Commons to versions that are not vulnerable.

Q: What type of attack is associated with CVE-2026-41711?

CVE-2026-41711 is associated with a Denial of Service (DoS) attack.

Published Jun 9, 2026

Updated

Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters.

Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14; 3.3.0 through 3.3.16; 3.2.0 through 3.2.15; 3.1.0 through 3.1.14; 3.0.0 through 3.0.15; 2.7.0 through 2.7.19.

Affected Software

9 affected components

maven/org.springframework.data/spring-data-commons>=4.0.0<=4.0.5, >=3.5.0<=3.5.11, >=3.4.0<=3.4.14, >=3.3.0<=3.3.16, >=3.2.0<=3.2.15, >=3.1.0<=3.1.14, >=3.0.0<=3.0.15, >=2.7.0<=2.7.19

Broadcom Spring Data Commons>=2.7.0<2.7.20

Broadcom Spring Data Commons>=3.0.0<=3.0.15

Broadcom Spring Data Commons>=3.1.0<=3.1.14

Broadcom Spring Data Commons>=3.2.0<=3.2.15

Broadcom Spring Data Commons>=3.3.0<3.3.17

Broadcom Spring Data Commons>=3.4.0<3.4.15

Broadcom Spring Data Commons>=3.5.0<3.5.11.1

Broadcom Spring Data Commons>=4.0.0<4.0.5.1

Event History

Jun 9, 2026

CVE Published

via MITRE·11:48 PM

Data Sourced

via MITRE·11:48 PM

DescriptionSeverityWeakness

Jun 10, 2026

Data Sourced

via NVD·12:16 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-41711?

CVE-2026-41711 has a medium severity score of 5.9.

What vulnerability does CVE-2026-41711 exploit?

CVE-2026-41711 exploits a potential Denial of Service attack through crafted Sort parameters leading to a StackOverflowException.

Which versions are affected by CVE-2026-41711?

CVE-2026-41711 affects Spring Data Commons versions 4.0.0 through 4.0.5, 3.5.0 through 3.5.11, 3.4.0 through 3.4.14, and 3.3.0 through 3.3.16.

How do I fix CVE-2026-41711?

To fix CVE-2026-41711, upgrade Spring Data Commons to versions that are not vulnerable.

What type of attack is associated with CVE-2026-41711?