CyberRota Analysis
AI-GeneratedApplications utilizing Spring Security's WebAuthn support are susceptible to a user verification bypass due to improper handling of distributed HTTP session stores. This vulnerability could allow attackers to bypass authentication mechanisms, potentially leading to unauthorized access to sensitive user data. Organizations using affected versions of Spring Security should prioritize patching to mitigate the risk of exploitation.
CVE
CVE-2026-47841
Severity
HIGH
CVSS
7.4
EPSS
0.29%
Original NVD Description
An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18
Related CVEs
Other vulnerabilities affecting the same vendor(s)