CVE-2026-2817Disclosure

LOWCVSS 4.8 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local user with basic privileges can access another user’s extracted snapshot contents, leading to unintended exposure of cache data.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://www.herodevs.com/vulnerability-directory/cve-2026-2817

Weakness type (CWE)

CWE-378CWE-379CWE-538

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2817

Full discourse1 post

Vulmon Vulnerability Feed@VulmonFeeds231d
Disclosure
CVE-2026-2817 Spring Data Geode Snapshot Import Vulnerability Enables Unauthorized Cache Data Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2817
Post summary
The post announces CVE-2026-2817, indicating a snapshot import flaw in Spring Data Geode that permits unauthorized cache data access, without providing PoC, exploitation, patching details, or evidence of active attacks.
0000065
4.0K followersView on X

Explore more

Back to dashboard