CVE 2025 41243

nvd.nist.gov • April 20, 2026

This CVE record is not being prioritized for NVD enrichment efforts due to resource or other concerns.

Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification. An application should be considered vulnerable when all the following are true: * The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gateway Server WebMVC is not vulnerable). * Spring Boot actuator is a dependency. * The Spring Cloud Gateway Server Webflux actuator web endpoint is enabled via management.endpoints.web.exposure.include=gateway. * The actuator endpoints are available to attackers. * The actuator endpoints are unsecured.

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address this page to [email protected] .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GreyNoise Report Reveals Early Warning Signals for Edge Device Vulnerabilities GreyNoise Intelligence has released a report indicating that spikes in malicious activity often precede the disclosure of new vulnerabilities in edge devices. The study tracked 147.8 million sessions over 103 days, identifying 68 activity surges that correlated with vendor-specific CVE disclosures. Notably, the median lead time before a vulnerability was disclosed was found to be 11 days. This pattern was observed across 33 CVEs affecting 18 vendors, including Cisco and Fortinet. The findings suggest that defenders can use these early warning signals to mitigate risks before vulnerabilities are publicly announced. The report emphasizes the importance of monitoring network traffic to detect potential threats early. The research builds on previous findings from 2025, reinforcing the need for proactive cybersecurity measures. 7 sources 73

Extracted Entities

CWE Weaknesses (2)

CWE-287 - Improper Authentication CWE-862 - Missing Authorization

Platforms (3)

Spring Boot Actuator Spring Cloud Gateway Server Webflux Spring Cloud Gateway Server WebMVC