CVE-2026-47834 | Spring Data JPA up to 3.4.15/3.5.13/4.0.6/4.1.0 Sort sql injection

August 26, 2026 Yanac

A vulnerability classified as critical has been found in Spring Data JPA up to 3.4.15/3.5.13/4.0.6/4.1.0. This affects an unknown part of the component Sort. This manipulation causes sql injection.

This vulnerability is tracked as CVE-2026-47834. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More