VulnSocial

CVE-2026-8759Disclosure

MEDIUMCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/org/beetl/ext/spring/SpELFunction.java of the component SpELFunction. The manipulation leads to improper neutralization of special elements used in an expression language statement. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-20CWE-917

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-05-17); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-05-17: 1Mentions · 2026-05-18: 1Mentions · 2026-05-29: 1PoC Mentioned / Linked · 2026-05-29: 1Exploit Tool / Code · 2026-05-29: 1Patch / Workaround · 2026-05-29: 1Technical Details · 2026-05-17: 1Technical Details · 2026-05-29: 105-1705-1805-29
Signal classification3 categories
Disclosure
133.3%
General
133.3%
Exploit
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-171
Disclosure1
2026-05-181
General1
2026-05-291
Exploit1
Full discourse3 posts
  • DFIR Lab@DFIR_Lab
    Exploit

    🚨 HIGH: CVE-2026-8759 (CVSS 7.3) affects xiandafu beetl ≤3.20.2. Expression language injection in SpELFunction allows remote exploitation. Public exploit available. Vendor unresponsive. Patch/mitigate immediately. #CVE #PatchNow https://t.co/6AEMFjGT08

    Post summary

    CVE-2026-8759 is a high‑severity SpEL function injection vulnerability with a publicly available exploit; an immediate patch is required.

    0000045
    31 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-8759 A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/… https://www.cve.org/CVERecord?id=CVE-2026-8759

    Post summary

    The text simply notes the existence of CVE-2026-8759 affecting xiandafu beetl up to version 3.20.2, with no additional details on exploitation, mitigation, or technical specifics.

    00000181
    57.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-8759 Expression Language Injection in Xiandafu Beetl Up to 3.20.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8759

    Post summary

    The advisory announces that Xiandafu Beetl versions up to 3.20.2 are vulnerable to Expression Language Injection (CVE-2026-8759) and provides the vulnerability details, but offers no PoC, exploit, or mitigation information.

    0000067
    4.0K followersView on X

Explore more

Back to dashboard