CVE-2026-47825: VMware Spring Cloud Gateway

High severity, CVSS 8.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configuration scenarios. This affects both the WebMVC and WebFlux Gateway Servers. Affected versions: Spring Cloud Gateway 3.1.x (fix 3.1.13). Spring Cloud Gateway 4.1.x (fix 4.1.13). Spring Cloud Gateway 4.2.x (fix 4.2.9). Spring Cloud Gateway 4.3.x (fix 4.3.5). Spring Cloud Gateway 5.0.x (fix 5.0.2).

Affected products

• VMware Spring Cloud Gateway: up to and including 3.1.10; from 4.0.0, before 4.1.13 (fixed in 4.1.13); from 4.2.0, before 4.2.9 (fixed in 4.2.9); from 4.3.0, before 4.3.4.1 (fixed in 4.3.4.1); from 5.0.0, before 5.0.1.1 (fixed in 5.0.1.1)

Published 2026-06-15. Last modified 2026-10-01.