Spring security advisory (AV26-386)

Malware News
1

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>

        <div><p><strong>Serial number: </strong>AV26-386<br /><strong>Date: </strong>April 23, 2026</p>

On April 23, 2026, Spring published security advisories to address vulnerabilities in multiple products. Included was a critical update for the following:

  • Spring Boot – 4.0.x versions prior to 4.0.6
  • Spring Boot – 3.5.x versions prior to 3.5.14
  • Spring Boot – 3.4.x versions prior to 3.4.16
  • Spring Boot – 3.3.x versions prior to 3.3.19
  • Spring Boot – 2.7.x versions prior to 2.7.33

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

</div>

Article Link: Spring security advisory (AV26-386) - Canadian Centre for Cyber Security