Ghostwire

CVE-2026-40995: X509AuthenticationProvider could issue a fully authenticated X509AuthenticationToken when a presented certificate mapped...

MEDIUM CVSS 5.4 Exploit Available

Published: June 11, 2026 | Last Modified: June 11, 2026

Description

X509AuthenticationProvider could issue a fully authenticated X509AuthenticationToken when a presented certificate mapped to UserDetails, without applying Spring Security's standard account lifecycle checks (disabled, locked, expired, or credentials-expired accounts). Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.

Ghostwire Analysis — What This Means Practically

Medium CVSS score indicates moderate risk — exploitation requires specific conditions or results in limited impact.
Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

CVE-2026-40995: X509AuthenticationProvider could issue a fully authenticated X509AuthenticationToken when a presented certificate mapped...

Description

Ghostwire Analysis — What This Means Practically

Security Coverage (1 articles)

References