Spring Boot Actuator Sensitive Endpoint Probe for 2026-10-19

Oct 19, 2026 Exploitation

Last Updated: 00:00 UTC

Spring Boot Actuator exposes management endpoints. heapdump returns a full JVM heap snapshot containing in-memory secrets. env returns all environment variables. gateway/routes is the RCE precursor for CVE-2022-22947 (Spring Cloud Gateway SPEL injection).

CVE References

CVE-2022-22947

MITRE ATT&CK

Tactic: Discovery (TA0007)
Technique: T1046 — Network Service Scanning

Observed URIs

Attackers by Country

United States: 101The Netherlands: 31France: 30Hong Kong: 24Singapore: 20Germany: 19Bulgaria: 19Russia: 13United Kingdom: 11Belgium: 9Japan: 8Canada: 7Taiwan: 7Ukraine: 6India: 3Switzerland: 3Sweden: 3Poland: 2Finland: 2Vietnam: 1Bangladesh: 1China: 1South Africa: 1Romania: 1Australia: 1Spain: 1Indonesia: 1Brazil: 1Moldova: 1Lithuania: 1South Korea: 1Iran: 1Ireland: 1Albania: 1
United States10130.3%
The Netherlands319.3%
France309.0%
Hong Kong247.2%
Singapore206.0%
Germany195.7%
Bulgaria195.7%
Russia133.9%
United Kingdom113.3%
Belgium92.7%
Japan82.4%
Canada72.1%
Taiwan72.1%
Ukraine61.8%
India30.9%
Switzerland30.9%
Sweden30.9%
Poland20.6%
Finland20.6%
Vietnam10.3%
Bangladesh10.3%
China10.3%
South Africa10.3%
Romania10.3%
Australia10.3%
Spain10.3%
Indonesia10.3%
Brazil10.3%
Moldova10.3%
Lithuania10.3%
South Korea10.3%
Iran10.3%
Ireland10.3%
Albania10.3%

IP Address : ASN : City/Provider

Share on: