Skip to content
conflictMEDIUM2026-04-22 06:16 UTC

CVE-2026-22746 - User Attribute Enumeration when Using DaoAuthenticationProvider

CVE ID :CVE-2026-22746 Published : April 22, 2026, 6:16 a.m. | 44 minutes ago Description :Vulnerability in Spring Spring Security. If an application is using the UserDetails#isEnabled, #isAccountNonExpired, or #isAccountNonLocked user attributes, to enable, expire, or lock users, then DaoAuth

ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD

Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.

GET THE SUNDAY BRIEFING →

RELATED · conflict