CVE-2026-40993 - Unfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database Entry

Back Back to CVE browser

HIGH

Unfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database Entry

Published Jun 9, 2026

7.3

HIGH

CVSS 3.1

EPSS 0.30%

Description

An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_asserting_party_metadata) may be able to store malicious serialized payloads in the columns containing the collection of verification or encryption credentials (verification_credentials and encryption_credentials, respectively).

Affected versions: Spring Security 7.0.0 through 7.0.5.

Affected products

Vendor Spring Product Spring Security Default
unaffected
- Version
  7.0.0
  Status
  affected
  Constraints
  <7.0.5.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Spring

Spring Security

unaffected

Version	Status	Constraints
7.0.0	affected	<7.0.5.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (5)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-35886		Advisory
https://github.com/advisories/GHSA-2q7c-5gjm-7q23		Advisory
https://github.com/spring-projects/spring-security/releases/tag/7.0.6
https://nvd.nist.gov/vuln/detail/CVE-2026-40993
https://spring.io/security/cve-2026-40993		Vendor Advisory