CVE-2026-47825

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-47825
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-47825.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-47825
Published
2026-06-15T19:34:29Z
Modified
2026-10-03T03:46:38Z
Severity
  • 8.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N CVSS Calculator
Summary
Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies in certain situations
Details

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configuration scenarios. This affects both the WebMVC and WebFlux Gateway Servers.

Affected versions: Spring Cloud Gateway 3.1.x (fix 3.1.13). Spring Cloud Gateway 4.1.x (fix 4.1.13). Spring Cloud Gateway 4.2.x (fix 4.2.9). Spring Cloud Gateway 4.3.x (fix 4.3.5). Spring Cloud Gateway 5.0.x (fix 5.0.2).

Database specific 
{
    "cna_assigner": "vmware",
    "cwe_ids": [
        "CWE-346"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47825.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.1.0"
                },
                {
                    "fixed": "3.1.13"
                },
                {
                    "introduced": "4.1.0"
                },
                {
                    "fixed": "4.1.13"
                },
                {
                    "introduced": "4.2.0"
                },
                {
                    "fixed": "4.2.9"
                },
                {
                    "introduced": "4.3.0"
                },
                {
                    "fixed": "4.3.4.1"
                },
                {
                    "introduced": "5.0.0"
                },
                {
                    "fixed": "5.0.1.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/spring-cloud/spring-cloud-gateway

Affected ranges

Type
GIT
Repo
https://github.com/spring-cloud/spring-cloud-gateway
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
8cec7967e30f2f0eefa6cf148b961dc3668dedcb
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:vmware:spring_cloud_gateway:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.1.10"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v2.*
v2.0.0.M1
v2.0.0.M2
v2.0.0.M3
v2.0.0.M4
v2.0.0.M5
v2.0.0.M6
v2.0.0.M7
v2.0.0.M8
v2.0.0.M9
v2.0.0.RC1
v2.0.0.RC2
v2.0.0.RELEASE
v2.0.1.RELEASE
v2.1.0.M1
v2.1.0.M2
v2.1.0.M3
v2.1.0.RC1
v2.1.0.RC2
v2.1.0.RC3
v2.1.0.RELEASE
v2.1.1.RELEASE
v2.2.0.M2
v2.2.0.M3
v2.2.0.RC1
v2.2.0.RC2
v2.2.0.RELEASE
v2.2.1.RELEASE
v3.*
v3.0.0
v3.0.0-M2
v3.0.0-M3
v3.0.0-M4
v3.0.0-M5
v3.0.0-M6
v3.0.0-RC1
v3.0.0.M1
v3.0.1
v3.0.2
v3.0.3
v3.1.0
v3.1.0-M1
v3.1.0-M2
v3.1.0-M3
v3.1.1
v3.1.10
v3.1.2
v3.1.3
v3.1.4
v3.1.5
v3.1.6
v3.1.7
v3.1.8
v3.1.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-47825.json"