Skip to content

CVE-2026-41726

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
June 10, 2026
Last Seen
June 10, 2026
API
Exploited in Wild
Ransomware Use
Public Exploits
Attack Vector

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-41726 was published on June 9, 2026, detailing a vulnerability in Spring for Apache Kafka. When applications use DelegatingDeserializer, producers can send records with unique random header values, leading to unbounded heap growth, GC thrashing, and potential OutOfMemoryError. Affected vers...

Public Exploits

Checking GitHub for proof-of-concept code…