CVE-2026-22739: Spring Cloud Config Server - Path Traversal
HoneyLabs honeypots recorded 2 probes matching CVE-2026-22739 from 2 distinct source IP addresses in the last 7 days. Severity is rated high.
What the sensors show
Probes arrived on 2 of the 7 days in this window. The busiest day was 2026-10-30, with 1. One address, 185.231.102.30, sent 50% of them. The largest source network was AS30893 (No ACK Group Holding AB), with 50% of the probes from 1 address. Over the last 90 days the sensors recorded 55 probes for it.
Request paths that identify it
- /application/default%2C..%2F..%2F..%2F..%2F..%2Fetc
- /application/..%2F..%2F..%2F..%2F..%2Fetc
- /application/..%252F..%252F..%252F..%252F..%252Fetc
- /application/default
- /application/..%2F..%2F..%2F..%2F..%2Fetc/main
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 185.231.102.30 | 1 | No ACK Group Holding AB | Sweden |
| 66.92.21.200 | 1 | Psychz Networks | United States |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS30893 | No ACK Group Holding AB | 1 | 1 |
| AS40676 | Psychz Networks | 1 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| Sweden | 1 |
| United States | 1 |
Captured requests
- /application/default
HTTP client fingerprints
- b11cun050_0004001e_00ecc3a8
- b11cun050_00040017_97f1d74f
CVE report
Open a specific CVE from the CVE tracker.