CVE-2026-22752 – Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata

CVE ID :CVE-2026-22752

Published : July 16, 2026, 10:16 a.m. | 1 hour, 18 minutes ago

Description :Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server.

This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.

Severity: 9.6 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…