CVE-2026-22754 — Vulnerability in Spring Spring Security. If an application uses to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are — CVE Database · The Intelligence Room