# CVE-2026-47861: Spring Framework UDP inbound adapter arbitrary datagram reflection

Source: https://junglewise.ai/threats/cve-2026-47861-spring-framework-udp-inbound-adapter-arbitrary-datagram  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-27. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-47861 · Severity: medium · CVSS 6.3 · Published 2026-08-27

Spring Integration is a middleware library used to build message-driven applications and integrate systems across enterprise networks. An unauthenticated attacker can send a single UDP packet to a server running a vulnerable UDP inbound adapter, causing it to automatically transmit outbound UDP datagrams to any arbitrary host and port the attacker specifies. This can be abused to amplify attacks against third parties or probe internal network infrastructure without authorization.

Technologies: [VMware Spring Integration](https://junglewise.ai/threats/technologies/spring-integration). Vendors: [VMware](https://junglewise.ai/threats/vendors/vmware).

## Quick answers

**Is CVE-2026-47861 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-47861 being exploited in the wild.

**How severe is CVE-2026-47861?** Medium severity, with a CVSS score of 6.3, published 27 August 2026.

**Which products and versions are affected?** VMware Spring Integration 5.5.0 through 5.5.21, 6.4.0 through 6.4.12, 6.5.0 through 6.5.10, 7.0.0 through 7.0.5, 7.1.0.

**Is there a fix for CVE-2026-47861?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-47861 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-47861?** Check whether you run VMware Spring Integration at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

Spring Integration UDP inbound adapter contains a vulnerability that allows unauthenticated remote attackers to trigger arbitrary outbound UDP traffic via a maliciously crafted inbound UDP packet. The vulnerability appears to be a UDP reflection or amplification flaw in the adapter's packet handling logic, where attacker-controlled destination information in the received packet is not properly validated before being used to generate responses. An attacker with network access to the UDP port can exploit this with a single crafted packet to cause the vulnerable server to send datagrams to internal or external targets of the attacker's choice, enabling reflection attacks, UDP amplification, or network reconnaissance. Patches are available in Spring Integration 5.5.22+, 6.4.13+, 6.5.11+, and 7.0.6+.

## Affected products

- VMware Spring Integration 5.5.0 through 5.5.21, 6.4.0 through 6.4.12, 6.5.0 through 6.5.10, 7.0.0 through 7.0.5, 7.1.0

## Timeline

- 2026-08-27: disclosed

## References

- [https://spring.io/security/cve-2026-47861](https://spring.io/security/cve-2026-47861)

## Related threats

- [Spring Integration insecure temporary file permissions in metadata store](https://junglewise.ai/threats/cve-2026-59292-spring-integration-insecure-temporary-file-permissions-in)
- [Spring Integration UnZipTransformer denial-of-service via zip bomb](https://junglewise.ai/threats/cve-2026-59274-spring-integration-unziptransformer-denial-of-service-via-zip)
- [Spring Integration JMS header injection via properties](https://junglewise.ai/threats/cve-2026-47880-spring-integration-jms-header-injection-via-properties)
- [VMware Spring Integration path traversal in FTP, SFTP, and SMB adapters](https://junglewise.ai/threats/cve-2026-40987-vmware-spring-integration-path-traversal-in-ftp-sftp-and-smb)