CVE-2026-41710Medium· 5.9▾ TwilightPoC availableAn attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later s…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 32.5 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Sep 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
1 GitHub repo
0.3% → 0.4%
An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and circuit breakers in the application to fail.
Affected versions: Spring Retry 2.0.0 through 2.0.12; 1.3.0 through 1.3.4.
spring_retry < 1.3.5spring_retry >= 2.0.0, < 2.0.12.1Upgrade past the affected range:
spring_retry 2.0.12.1Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-67415Medium· 4.9RabbitMQ is a messaging and streaming broker
CVE-2026-67222Medium· 6.5RabbitMQ is a messaging and streaming broker
CVE-2026-66071Medium· 6.5RabbitMQ is a messaging and streaming broker
CVE-2026-66073Medium· 6.5RabbitMQ is a messaging and streaming broker
CVE-2026-47857Medium· 5.9In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition. Reactor Core 3.8.0 - 3.8.6 Reactor Core 3.5.0 - 3.7.19 Reactor Core 3.4.41 and ea…
CVE-2026-57220High· 7.5RabbitMQ is a messaging and streaming broker