Answer in brief
CVE-2026-56100 records a High severity (CVSS 8.6) vulnerability in SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint. The current sources do not mark it as known exploited. The current feed maps SpringBlade/SpringBlade (generic), SpringBlade/SpringBlade (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 8.6. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps SpringBlade/SpringBlade (generic), SpringBlade/SpringBlade (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| SpringBlade/SpringBladegeneric | >=2.7.3 <5.0.0 | 5.0.0 |
| SpringBlade/SpringBladegeneric | * | Not reported |
Published upstream
Aug 28, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 1, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 28, 2026
SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestController without authorization checks. Attackers can exploit the gateway's authentication filter, which only validates JWT parsing without verifying user roles or caller identity, and leverage a hardcoded JWT signing key embedded in publicly available JARs to forge tokens and escalate privileges from a low-privilege user to administrator, enabling cross-tenant data pollution and persistent backdoor access.
Quoted source text, attributed separately from HOL analysis.