Several widely used Java frameworks and tools released new versions in the weeks surrounding Oracle's March 17 launch of JDK 26, as the Spring ecosystem and related projects continued iterating toward ...
A pre‑authentication bug in SAML Web SSO, combined with weak access controls and cryptography, allows attackers to escalate privileges and achieve remote code execution.