CVE-2026-40993

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-40993
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40993.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-40993
Aliases
Downstream
Published
2026-06-09T23:46:39.702Z
Modified
2026-08-12T17:26:04.322495874Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H CVSS Calculator
Summary
Unfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database Entry
Details

An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2assertingpartymetadata) may be able to store malicious serialized payloads in the columns containing the collection of verification or encryption credentials (verificationcredentials and encryption_credentials, respectively).

Affected versions: Spring Security 7.0.0 through 7.0.5.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "7.0.0"
                },
                {
                    "fixed": "7.0.5.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        },
        {
            "extracted_events": [
                {
                    "introduced": "7.0.0"
                },
                {
                    "fixed": "7.0.5"
                }
            ],
            "source": "DESCRIPTION"
        }
    ],
    "cna_assigner": "vmware",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40993.json",
    "cwe_ids": [
        "CWE-502"
    ]
}
References

Affected packages

Git / github.com/spring-projects/spring-security

Affected ranges

Type
GIT
Repo
https://github.com/spring-projects/spring-security
Events
Introduced
1d99a7fb14c62354cac00412cce2071892cdf465
Fixed
53bc6a77963209bb2a5f3efdd855b1f4a8051cc3
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "7.0.0"
        },
        {
            "fixed": "7.0.5"
        }
    ],
    "source": "DESCRIPTION"
}

Affected versions

7.*
7.0.0
7.0.1
7.0.2
7.0.3
7.0.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40993.json"