Skip to content

CVE-2026-22752

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
July 17, 2026
Last Seen
July 17, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Authentication Bypass Vulnerability in Spring Authorization Server72.6

A critical vulnerability, CVE-2026-22752, has been identified in Spring Authorization Server, affecting versions 1.3.0 to 1.3.10, 1.4.0 to 1.4.9, 1.5.0 to 1.5.6, and 7.0.0 to 7.0.4. The flaw allows attackers with a valid Initial Access Token to register malicious clients through Dynamic Client Regis...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

CWE-20 - Improper Input ValidationCWE-79 - Cross-site Scripting (xss)T1078 - Valid AccountsT1190 - Exploit Public-Facing ApplicationSpring Authorization ServerXSS