CVE-2026-22731

The record

Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is declared under a specific path, already configured for a Health Group additional path. This issue affects Spring Boot: from 4.0 before 4.0.3, from 3.5 before 3.5.11, from 3.4 before 3.4.15. This CVE is similar but not equivalent to CVE-2026-22733, as the conditions for exploit and vulnerable versions are different.

Affected packages

Related vulnerabilities

• CVE-2026-22737 Use of Java scripting engine enabled (e.g. Also affects apache-nifi-registry
• CVE-2026-22733 Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass"… Also affects apache-nifi-registry
• CVE-2026-22735 Spring MVC and WebFlux applications are vulnerable to stream corruption when using… Also affects apache-nifi-registry
• CVE-2026-22732 When applications specify HTTP response headers for servlet applications using Spring… Also affects apache-nifi-registry
• CVE-2026-1225 ACE vulnerability in configuration file processing by QOS.CH logback-core up to and… Also affects apache-nifi-registry
• CVE-2025-67735 Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder Also affects apache-nifi-registry
• CVE-2025-11226 ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up… Also affects apache-nifi-registry
• CVE-2025-41249 The Spring Framework annotation detection mechanism may not correctly resolve annotations… Also affects apache-nifi-registry