CVE-2026-22747
Medium · 6.8CVSS
6.8
EPSS
0.3%
Published
Apr 22, 2026
CISA due date
—
The record
Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. This issue affects Spring Security: from 7.0.0 through 7.0.4.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-88647 A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the… CWE-297
- CVE-2026-107660 FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation… CWE-297
- CVE-2026-19553 ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if… CWE-297
- CVE-2026-91769 PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries… CWE-297
- CVE-2026-63374 AnyIO is a high level asynchronous concurrency and networking framework that works on top… CWE-297
- CVE-2026-79636 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-297
- CVE-2026-84197 In Eclipse Ditto's Node.js JavaScript client, all released versions of… CWE-297
- CVE-2026-9744 IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly… CWE-297