PoC Archive PoC Archive

tag

Spel-Injection

Spring Cloud Gateway Actuator RCE — Vulnerable Environment Lab (CVE-2025-41243)
CVE-2025-41243 web Unpatched
CVE-2025-41243webCRITICAL 10Unpatched2026-07-06Thymeleaf SpEL Injection Remote Code Execution (CVE-2026-41901)
CVE-2026-41901 web Patched
CVE-2026-41901webCRITICALPatched2026-07-05Spring AI SimpleVectorStore SpEL Injection RCE (CVE-2026-22738)
CVE-2026-22738 web Patched
CVE-2026-22738webCRITICAL 9.8Patched2026-07-05