Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- broadcom vmware avi load balancer, vmware avi load balancer +1 moreVMware Avi Load Balancer Remote Code Execution VulnerabilityCVE-2026-478698.7 High
- broadcom vmware avi load balancer, vmware avi load balancer +1 moreVMware Avi Load Balancer Local Privilege Escalation VulnerabilityCVE-2026-478687.8 High
- broadcom vmware avi load balancer, vmware avi load balancer +1 moreVMware Avi Load Balancer Remote Code Execution VulnerabilityCVE-2026-478678.7 High
- broadcom vmware avi load balancer, vmware avi load balancer +1 moreVMware Avi Load Balancer Authorization Bypass VulnerabilityCVE-2026-478668.3 High
- broadcom vmware avi load balancer, vmware avi load balancer +1 moreVMware Avi Load Balancer Authentication Bypass VulnerabilityCVE-2026-478659.8 Critical
- vmware pinnipedPrivilege Escalation via Active Directory LDAP injection in Pinniped Supervisor can be executed by an attacker who can edit LDAP Group DN entriesCVE-2026-592693.8 Low
- autodesk fusionMCP Extension Code Injection Vulnerability in Autodesk Fusion DesktopCVE-2026-107899.6 Critical
- spring cloud gateway, vmware spring cloud gateway +1 moreSpring Cloud Gateway Server Forwards Headers from Untrusted Proxies in certain situationsCVE-2026-478258.6 High
- spring ai, vmware spring ai +1 moreSpring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector StoresCVE-2026-47835Fix available8.6 High
- spring for graphql, vmware spring for graphql +1 moreSpring GraphQL Annotation Detection VulnerabilityCVE-2026-41856Fix available7.5 High
- spring for graphql, vmware spring for graphql +1 moreCross-Site WebSocket Hijacking in Spring for GraphQLCVE-2026-41700Fix available8.1 High
- spring for graphql, vmware spring for graphql +1 moreUnsafe Deserialization in Spring GraphQLCVE-2026-41699Fix available8.1 High
- spring boot, vmware spring boot +1 morePredictable Temp Directory in Artemis Auto-configurationCVE-2026-41001Fix available5.3 Medium
- spring boot, vmware spring boot +1 moreMail Auto-Configuration Does Not Enable SSL Hostname VerificationCVE-2026-40992Fix available5.0 Medium
- spring integration, vmware spring integration +1 moreRemote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalizationCVE-2026-40987Public exploitFix available7.1 High
- spring security, vmware spring security +1 moreUnauthorized User Impersonation when Using X.509 Client CertificatesCVE-2026-47838Fix available6.8 Medium
- spring data rest, vmware spring data rest +1 moreSpring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keysCVE-2026-41837Fix available5.3 Medium
- spring for apache pulsar, vmware spring for apache pulsar +1 moreIn Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserializationCVE-2026-41732Fix available8.1 High
- spring for apache kafka, vmware spring for apache kafka, red hat fuse 7 +2 more +4 moreIn Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserializationCVE-2026-41731Fix available8.1 High
- spring data rest, vmware spring data rest +1 moreSpring Data REST exposes persistence-layer internals in error responsesCVE-2026-41730Fix available5.3 Medium
- spring data rest, vmware spring data rest +1 moreSpring Data REST SpEL Injection via Map Key in JSON PatchCVE-2026-41729Public exploitFix available8.1 High
- spring data rest, vmware spring data rest +1 moreSpring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collectionsCVE-2026-41728Fix available7.5 High
- spring for apache kafka, vmware spring for apache kafka +1 moreIn Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behaviorCVE-2026-41727Fix available6.5 Medium
- spring for apache kafka, vmware spring for apache kafka +1 moreIn Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector headerCVE-2026-41726Fix available6.5 Medium
- spring data mongodb, vmware spring data mongodb +1 moreSpring Data MongoDB - SpEL Expression Injection via Annotated Query Parameter BindingCVE-2026-41717Fix available8.1 High
- spring amqp, vmware spring advanced message queuing protocol +1 moreIn Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManagerCVE-2026-41714Fix available4.0 Medium
- spring security, vmware spring security +1 moreOpen Redirect When Using CookieRequestCacheCVE-2026-41706Fix available6.1 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreIn Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queuesCVE-2026-41701Fix available4.4 Medium
- spring data mongodb, vmware spring data mongodb +1 moreSpring Data MongoDB Bind Parameter Literal Quoting BreakoutCVE-2026-41696Fix available5.9 Medium
- spring security, vmware spring security +1 moreSAML Payloads Decrypted Without Valid SignatureCVE-2026-41694Fix available3.7 Low
- broadcom spring authorization server, spring authorization server, security +1 more +3 moreSpring Security Authorization Server Open Redirect via request_uriCVE-2026-41008Fix available6.1 Medium
- spring security, vmware spring security +1 moreUnencoded HTML Outputs in Spring Security May Allow Cross-Site ScriptingCVE-2026-41003Fix available7.6 High
- spring security, vmware spring security +1 moreUnfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database EntryCVE-2026-40993Fix available7.3 High
- spring security, vmware spring security +1 moreUnbounded DEFLATE Inflation in SAML 2.0 Service ProviderCVE-2026-40988Fix available7.5 High
- spring hateoas, vmware spring hateoas +1 moreSpring HATEOAS heap exhaustion through unbounded internal cachingCVE-2026-41007Fix available7.5 High
- spring hateoas, vmware spring hateoas +1 moreSpring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configurationCVE-2026-41006Fix available7.5 High
- spring framework, vmware spring framework +1 moreSpring Framework Unsafe Deserialization via Jackson JMS ConvertersCVE-2026-41855Fix available8.1 High
- spring framework, vmware spring framework +1 moreSpring Framework Server-Side Request Forgery via UriComponentsBuilderCVE-2026-41854Fix available4.2 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Multipart Request Smuggling in Spring MVC and WebFluxCVE-2026-41853Fix available5.3 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Arbitrary Method Invocation in SpEL ExpressionsCVE-2026-41852Fix available3.7 Low
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via Unbounded Cache in SpELCVE-2026-41851Fix available5.3 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Algorithmic Denial of Service via SpEL ExpressionsCVE-2026-41850Fix available7.5 High
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via Integer Overflow in SpEL ExpressionsCVE-2026-41849Fix available7.5 High
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via AntPathMatcherCVE-2026-41848Fix available3.7 Low
- spring framework, vmware spring framework +1 moreSpring Framework Security Filter Bypass in WebFlux Kotlin Router DSLCVE-2026-418474.8 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Cross-site Scripting via JSP Form TagsCVE-2026-41846Fix available5.9 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Cross-site Scripting via JavaScriptUtilsCVE-2026-41845Fix available7.1 High
- spring framework, vmware spring framework +1 moreSpring Framework Open Redirect in Spring MVC and WebFluxCVE-2026-41844Fix available4.2 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFluxCVE-2026-41843Fix available5.9 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via Versioned Resources in Spring MVC and WebFluxCVE-2026-41842Fix available7.5 High
- Show moreLoading…