Spring-Boot — PoC Archivehttps://poc.intelseclab.com/tags/spring-boot/Latest proof-of-concept entries.Hugoen-usFri, 31 Jul 2026 00:00:00 +0000Alibaba Fastjson 1.x checkAutoType Bypass to Remote Code Execution via jar:http SSRF and fd-Reread Trick (CVE-2026-16723)https://poc.intelseclab.com/pocs/web/2026-07-31_cve-2026-16723-fastjson-rce/Fri, 31 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-31_cve-2026-16723-fastjson-rce/Critical severity (CVSS 9) — web · CVE-2026-16723. Status: PoC (no vendor patch, Fastjson 1.x line unpatched). Affects: Alibaba Fastjson (Java JSON library), packaged inside a Spring Boot executable fat-JAR. Tags: fastjson, deserialization, rce, java, spring-boot, autotype-bypass, jar-protocol, ssrf.webCriticalfastjsondeserializationrcejavaspring-bootautotype-bypassjar-protocolssrfcamel-coap Header Injection → RCE Self-Contained Reproducer (CVE-2026-33453)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-33453-camel-coap-header-injection-reproducer/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-33453-camel-coap-header-injection-reproducer/Critical severity (CVSS 9.8) — web · CVE-2026-33453. Status: Patched. Affects: Apache Camel camel-coap component (org.apache.camel.coap.CamelCoapResource), routes forwarding to camel-exec. Tags: apache-camel, camel-coap, coap, header-injection, rce, cwe-915, camel-exec, unauthenticated, udp, spring-boot.webCriticalapache-camelcamel-coapcoapheader-injectionrcecwe-915camel-execunauthenticatedudpspring-bootApache Camel `camel-consul` ConsulRegistry Deserialization RCE (CVE-2026-27172)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-27172-camel-consul-registry-deserialization/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-27172-camel-consul-registry-deserialization/Critical severity (CVSS 9.8) — web · CVE-2026-27172. Status: Patched. Affects: Apache Camel camel-consul component (org.apache.camel.component.consul.ConsulRegistry). Tags: apache-camel, camel-consul, consulregistry, java-deserialization, rce, cwe-502, gadget-chain, ysoserial, spring-boot.webCriticalapache-camelcamel-consulconsulregistryjava-deserializationrcecwe-502gadget-chainysoserialspring-bootThymeleaf SpEL Injection Remote Code Execution (CVE-2026-41901)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-41901-thymeleaf-spel-injection-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-41901-thymeleaf-spel-injection-rce/Critical severity — web · CVE-2026-41901. Status: PoC. Affects: Spring Boot application using Thymeleaf template engine. Tags: thymeleaf, spel-injection, ssti, spring-boot, rce, java, template-injection.webCriticalthymeleafspel-injectionsstispring-bootrcejavatemplate-injectionSpring Security Lazy Header Writing Security Header Bypass (CVE-2026-22732)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22732-spring-security-header-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-22732-spring-security-header-bypass/Critical severity (CVSS 9.1) — web · CVE-2026-22732. Status: PoC. Affects: Spring Security (Spring Boot applications). Tags: spring-security, spring-boot, security-headers, response-splitting, x-frame-options, hsts, java, junit.webCriticalspring-securityspring-bootsecurity-headersresponse-splittingx-frame-optionshstsjavajunit