CVE-2026-59277 — Spring Security InetAddressMatchers Incomplete Internal Network Classification

CVE-2026-59277

Spring Security InetAddressMatchers Incomplete Internal Network Classification PUBLISHED

Description (CNA)

Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal (private) or external (public) network. Spring Security 7.1.0

Affected (CNA)

Vendor / product	Versions
Spring / Spring Security	affected 7.1.0

CWE

No CWE identifiers supplied.

References

https://spring.io/security/cve-2026-59277

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.