Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Vulnerability in Spring Spring Security. Applications that explicitly configure One-Time Token login with JdbcOneTimeTokenService are vulnerable to a Time-of-check Time-of-use (TOCTOU) race condition. This issue affects Spring Security: from 6.4.0 through 6.4.15, from 6.5.0 through 6.5.9, from 7.0.0 through 7.0.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-21 | 1 | Disclosure1 |
| 2026-04-22 | 1 | General1 |
CVE-2026-22751 Time-of-Check Time-of-Use Race Condition in Spring Security JdbcOneTimeTokenService https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-22751
Post summary
The entry lists CVE-2026-22751 with a brief description of a race condition in Spring Security, linking only to a vulnerability database page; no proof of exploitation or mitigation is included.
CVE-2026-22751 Vulnerability in Spring Spring Security. Applications that explicitly configure One-Time Token login with JdbcOneTimeTokenService are vulnerable to a Time-of-check Ti… https://www.cve.org/CVERecord?id=CVE-2026-22751
Post summary
The post announces CVE‑2026‑22751, a Time‑of‑check flaw in Spring Security affecting JdbcOneTimeTokenService, without providing PoC, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | vmware | spring_security | - | - | - |