Product · VMware

Spring Cloud Gateway

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2026-22750

SSL bundle configuration silently bypassed in Spring Cloud Gateway

When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl.bundle, the configuration was silently ignored and the default SSL configuration was used instead. Note: The 4.2.x branch is no longer under open source suppor…

VMware Spring Cloud Gateway org.springframework.cloud:spring-cloud-gateway Maven

Apr 10, 2026
High 8.6

CVE-2025-41235

CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies.

VMware Spring Cloud Gateway Spring Cloud Gateway Server MVC org.springframework.cloud:spring-cloud-gateway-server Maven

May 30, 2025