⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2022-22947: Spring Cloud Gateway Actuator RCE

July 17, 2026

CVE-2022-22947 is a remote code execution vulnerability in Spring Cloud Gateway that occurs when the Actuator endpoint is enabled and exposed unsecured.

Discovered from: NadMesh Botnet Targets Exposed AI Services for Cloud Credentials and Kubernetes Tokens