CVE-2026-41700Disclosure(vmware / spring_for_graphql)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch vmware spring_for_graphql systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visiting a malicious page, allowing the attacker to execute arbitrary GraphQL operations with the victim's credentials. Affected versions: Spring for GraphQL 2.0.0 through 2.0.3; 1.4.0 through 1.4.5; 1.3.0 through 1.3.8; 1.0.0 through 1.0.6.

vmware CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://spring.io/security/cve-2026-41700

Weakness type (CWE)

CWE-346

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

spring_for_graphql

Threat summary

Patch or workaround signal is available
5 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-06-11); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

vmware

Products

spring_for_graphql

Deep dive

Activity timeline5 mentions / 3d

Signal classification3 categories

Disclosure

240.0%

Patch

240.0%

General

120.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-11	2	Disclosure1General1
2026-06-12	2	Disclosure1Patch1
2026-06-13	1	Patch1

Full discourse5 posts

cybersecuritypath@cybrsecpath135d
Patch
Spring for GraphQL Vulnerability CVE-2026-41700: Patch Urgently https://thecybrdef.com/spring-for-graphql-vulnerability-cve-2026-41700-patch-urgently/ #Cybertrending #Cybernewsdaily #Cybersecurity
Post summary
The post announces the discovery of CVE‑2026‑41700 affecting Spring GraphQL and urges users to apply an urgent patch, with no PoC, exploitation, or technical details provided.
0000033
9 followersView on X
Crypto Master💎 Arichain@Vijaykiran0987136d
Patch
Spring for GraphQL Vulnerability CVE-2026-41700: Patch Urgently https://thecybrdef.com/spring-for-graphql-vulnerability-cve-2026-41700-patch-urgently/ #Cybertrending #Cybernewsdaily #Cybersecurity
Post summary
The article highlights the need for a patch for the Spring GraphQL CVE-2026-41700 vulnerability, urging users to apply it promptly.
0000032
64 followersView on X
DFIR Lab@DFIR_Lab136d
Disclosure
🚨 HIGH SEVERITY: CVE-2026-41700 (CVSS 8.1) Spring for GraphQL WebSocket transport vulnerable to Cross-Site WebSocket Hijacking. Attackers can execute arbitrary GraphQL operations with victim credentials. Affected: v1.0.0-2.0.3 #CVE #Vulnerability #PatchNow https://t.co/WhQJ5ZsMWA
Post summary
The tweet announces CVE-2026-41700, a high‑severity Cross‑Site WebSocket Hijacking flaw in Spring for GraphQL WebSocket transport, detailing the vulnerability and affected versions, but it does not mention any PoC, exploit, or patch.
0000040
44 followersView on X
Infoflowcloud@infoflowcloud137d
Disclosure
🚨*CVE* CVE-2026-41700 Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated use… https://www.cve.org/CVERecord?id=CVE-2026-41700 ----- Traducción: CVE-2026-41700 Spr… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-41700, describing its Cross‑Site WebSocket Hijacking flaw but contains no PoC, exploit, patch, or active exploitation information.
0000025
79 followersView on X
CVE@CVEnew137d
General
CVE-2026-41700 Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated use… https://www.cve.org/CVERecord?id=CVE-2026-41700
Post summary
The CVE describes a Cross‑Site WebSocket Hijacking vulnerability in Spring for GraphQL with WebSocket transport enabled, but provides no evidence of active exploitation, PoC, or patch.
00000188
57.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	vmware	spring_for_graphql	-	-	-

Explore more

Back to dashboard vmware CVEs spring_for_graphql vulnerabilities

What researchers are saying

CVE-2026-41700

DFIR Lab[verified]@DFIR_LabDisclosure

The tweet announces CVE-2026-41700, a high‑severity Cross‑Site WebSocket Hijacking flaw in Spring for GraphQL WebSocket transport, detailing the vulnerability and affected versions, but it does not mention any PoC, exploit, or patch.

cybersecuritypath@cybrsecpathPatch

The post announces the discovery of CVE‑2026‑41700 affecting Spring GraphQL and urges users to apply an urgent patch, with no PoC, exploitation, or technical details provided.

Crypto Master💎 Arichain@Vijaykiran0987Patch

The article highlights the need for a patch for the Spring GraphQL CVE-2026-41700 vulnerability, urging users to apply it promptly.

Infoflowcloud@infoflowcloudDisclosure

The tweet announces CVE-2026-41700, describing its Cross‑Site WebSocket Hijacking flaw but contains no PoC, exploit, patch, or active exploitation information.

CVE@CVEnewGeneral

The CVE describes a Cross‑Site WebSocket Hijacking vulnerability in Spring for GraphQL with WebSocket transport enabled, but provides no evidence of active exploitation, PoC, or patch.