High severity7.7NVD Advisory· Published Aug 27, 2026· Updated Sep 10, 2026

CVE-2026-47879

Description

Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Spring Cloud Gateway 4.3.0 - 4.3.5 Spring Cloud Gateway 4.0.0 - 4.2.9 Spring Cloud Gateway 3.1.13 and earlier

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Spring Cloud/Spring Cloud Gatewayinferred2 versions
5.0.0 - 5.0.2+ 1 more
- (no CPE)range: 5.0.0 - 5.0.2
- (no CPE)

Patches

Vulnerability mechanics

References

spring.io/security/cve-2026-47879nvdVendor Advisory

News mentions

Spring Cloud: 17 Vulnerabilities Disclosed Across Multiple Components, Ranging High to Low Severity
Vypr Intelligence · Aug 27, 2026

cvss	0.501
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000