{"vulnerability": "CVE-2026-59270", "sightings": [{"uuid": "cf2a38d5-279c-4a72-b906-09f2e6d236b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtkonlidy62q", "content": "Four Spring Security vulnerabilities were disclosed, led by CVE-2026-59270 (CVSS 9.4). Attackers can read or modify entries in the in-memory directory.\n\n#SpringSecurity #CVE202659270 #LDAP #WebAuthn #DPoP #AppSec", "creation_timestamp": "2026-08-21T02:11:25.821898Z"}, {"uuid": "bc235a39-4fc5-4c2b-80d1-e7a2b96f3e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtletiqouz2p", "content": "Spring Security CVE-2026-59270 lets attackers get full admin over LDAP without login. #SpringSecurity #LDAP #Vulnerability #CVESecurity #Cybersecurity #DevSecOps https://thedailytechfeed.com/critical-spring-security-flaw-opens-ldap-servers-to-admin-takeover/", "creation_timestamp": "2026-08-21T08:48:24.049196Z"}, {"uuid": "0cfc22a2-92e6-447a-ae62-b712b8a777f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu2qo56isw25", "content": "CVE-2026-59270 - spring security\nThe built\u2011in LDAP service in Spring Security automatically creates an admin account and makes it reachable from any network address. This can let anyone on the network\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#springsecurity #spring #CVE #infosec", "creation_timestamp": "2026-08-27T11:30:04.798531Z"}, {"uuid": "4b0517ee-3253-4dd2-9681-5c23270bf040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5kitdocbckhlp", "content": "CVE-2026-59270 - Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces\nCVE ID : CVE-2026-59270\n \n Published : Aug. 27, 2026, 6:17 a.m. | 18\u00a0minutes ago\n \n Description : Spring Security's embedded UnboundID LDAP serve...", "creation_timestamp": "2026-08-27T06:51:14.424048Z"}, {"uuid": "56a1d215-d80c-4471-8d09-cd22f66ded56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2bmivlm522", "content": "\ud83d\udd34 CVE-2026-59270 - Critical (9.4)\n\nSpring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59270/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T07:00:44.127956Z"}, {"uuid": "3f953c26-20a6-45f7-bd9c-27c1b19d1d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2fdded362p", "content": "\ud83d\udea8 CVE-2026-59270 \u2014 CVSS 9.4 CRITICAL\n\nSpring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-59270\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T08:07:10.676759Z"}]}