Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/ExternalResourceHandler.jav of the component SparkJava. Executing a manipulation can lead to symlink following. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-17459 A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/re… https://www.cve.org/CVERecord?id=CVE-2026-17459
Post summary
A CVE-2026-17459 vulnerability in perwendel spark 2.9.4 was disclosed, affecting the staticFiles.externalLocation function.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-17459](https://github.com/perwendel/spark/) A vulnerability was determined in perwendel... https://github.com/perwendel/spark/ #PatchManagement #Vulnerability #CVE
Post summary
The tweet announces CVE‑2026‑17459 with a link to its GitHub project but offers no further technical or operational details.
CVE-2026-17459 Symlink Following Vulnerability in Perwendel Spark Up to 2.9.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-17459
Post summary
Perwendel Spark versions up to 2.9.4 are affected by a symlink following vulnerability (CVE‑2026‑17459).