SpringBlade CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH SpringBlade CVE published 2026-08-28

CVE-2026-56100

CVE-2026-56100 is a high-severity privilege escalation vulnerability affecting SpringBlade versions from 2.7.3 up to but not including 5.0.0. An authenticated attacker can exploit this vulnerability by sending crafted POST requests to an unprotected internal Feign user-creation endpoint, allowing them to create system administrator accounts. The vulnerability is caused by the gateway's authentication filt [truncated]