Is CVE-2026-59306 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-59306?

CVE-2026-59306 has a CVSS v3 severity of LOW (3.1).

Back

CVE-2026-59306

Description

Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6