CVE-2026-47860— Unbounded decompression of attacker-supplied compressed message bodies
Quick assessment
Affected
Spring Spring AMQP
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
能够向被应用程序消费的队列发布消息的攻击者，如果该应用程序启用了消息解压缩功能，可以通过发送一条约 1 MB 的消息导致消费端 JVM 崩溃。 受影响的版本： Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 及更早版本
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-47860
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Unbounded decompression of attacker-supplied compressed message bodies
Source: CVE Program / CVE List V5
Vulnerability Description
An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single ~1 MB message.
Spring AMQP 4.1.0
Spring AMQP 4.0.0 - 4.0.4
Spring AMQP 3.2.0 - 3.2.12
Spring AMQP 2.4.18 and earlier
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Spring | Spring AMQP | 4.1.0 | - |
|
II. Public POCs for CVE-2026-47860
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
default-local-qwen3.6
· 3640 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-47860
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-47860 (1)
Same Patch Batch · Spring · 2026-08-26 · 20 CVEs total
| CVE-2026-47852 | 7.5 HIGH | Predictable cache directory location allows local ONNX model substitution in Spring AI |
| CVE-2026-47851 | 7.5 HIGH | Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Re |
| CVE-2026-47841 | 7.4 HIGH | WebAuthn User Verification Bypass via Session Serialization |
| CVE-2026-47836 | 7.2 HIGH | Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN |
| CVE-2026-47837 | 6.8 MEDIUM | Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests |
| CVE-2026-47842 | 6.5 MEDIUM | Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Co |
| CVE-2026-47856 | 6.3 MEDIUM | JsonToObjectTransformer resolves the json__TypeId__ message header to an arbitrary class w |
| CVE-2026-47861 | 6.3 MEDIUM | UDP adapter sends ack to attacker-supplied host:port parsed from packet body, even when ac |
| CVE-2026-47848 | 6.1 MEDIUM | Reactor Netty WebSocket Client Leaks Credentials On Redirect |
| CVE-2026-47863 | 5.9 MEDIUM | Reactor Core bufferTimeout fair-backpressure pipeline permanently hangs when upstream deli |
| CVE-2026-47857 | 5.9 MEDIUM | Reactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around |
| CVE-2026-47862 | 5.4 MEDIUM | ZipTransformer uses file_name header to build workDirectory path without sanitization |
| CVE-2026-47859 | 5.4 MEDIUM | Unbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote |
| CVE-2026-47845 | 5.3 MEDIUM | Reactor Netty HTTP Server may incorrectly evaluate proxy addresses |
| CVE-2026-47874 | 5.3 MEDIUM | Reactor Netty HTTP Server Denial of Service With Pipelined Requests |
| CVE-2026-47844 | 5.3 MEDIUM | Reactor Netty HTTP Server Leaks Exception Details |
| CVE-2026-47834 | 4.8 MEDIUM | Spring Data JPA Sort expression validation bypass |
| CVE-2026-47850 | 4.3 MEDIUM | Spring Data REST allows mutation of the version property of immutable aggregates via PUT |
| CVE-2026-47843 | 3.7 LOW | Reactor Netty may incorrectly route traffic due to DNS resolver reuse |
IV. Related Vulnerabilities
Same product: Spring AMQP
Same vendor: Spring
-
CVE-2026-47874
Reactor Netty HTTP Server Denial of Service With Pipelined R -
CVE-2026-47861
UDP adapter sends ack to attacker-supplied host:port parsed -
CVE-2026-47863
Reactor Core bufferTimeout fair-backpressure pipeline perman -
CVE-2026-47862
ZipTransformer uses file_name header to build workDirectory -
CVE-2026-47859
Unbounded memory allocation in RFC6587SyslogDeserializer (oc
V. Comments for CVE-2026-47860
No comments yet