https://vulnogram.org/ Most recent CVEs assigned by VMware by Broadcom (vmware). https://vulnogram.org/seaview/icons/vmware.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-59347 https://vulnogram.org/CVE-2026-59347 VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running… High Wed, 07 Oct 2026 05:40:05 GMT https://vulnogram.org/CVE-2026-59346 https://vulnogram.org/CVE-2026-59346 VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Affected ver… Critical Wed, 07 Oct 2026 05:40:03 GMT https://vulnogram.org/CVE-2026-59357 https://vulnogram.org/CVE-2026-59357 Insufficient verification of data authenticity (CWE-345) in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 (inclusive) allows an authenticated UAA user to bypass the OAuth authorization-code exchange and establish an authenti… Medium Network Exploitable Tue, 06 Oct 2026 07:06:18 GMT https://vulnogram.org/CVE-2026-59358 https://vulnogram.org/CVE-2026-59358 Improper authentication (CWE-287) in the OAuth token endpoint in Cloud Foundry UAA allows a remote, authenticated attacker holding a valid user access token to obtain a fully-privileged client_credentials token for the OAuth client that issued it, by… High Tue, 06 Oct 2026 06:54:10 GMT https://vulnogram.org/CVE-2026-59341 https://vulnogram.org/CVE-2026-59341 A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the hand… Medium Tue, 15 Sep 2026 09:16:59 GMT https://vulnogram.org/CVE-2026-47839 https://vulnogram.org/CVE-2026-47839 A vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope despite operators restricting that provider through externalGroupsWhitelist configuration. The issue occurs specifically when an OIDC identity… Critical Network Exploitable Fri, 11 Sep 2026 09:14:09 GMT https://vulnogram.org/CVE-2026-41012 https://vulnogram.org/CVE-2026-41012 Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualizatio… High Sat, 29 Aug 2026 02:15:11 GMT https://vulnogram.org/CVE-2026-59324 https://vulnogram.org/CVE-2026-59324 When an IntegrationFlow uses .fluxTransform() with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription have their reply headers (replyChannel, errorChannel, correlationId, a… High Network Exploitable Thu, 27 Aug 2026 18:04:51 GMT https://vulnogram.org/CVE-2026-59322 https://vulnogram.org/CVE-2026-59322 The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserializes embedded JSON headers into a plain Map and constructs a GenericMessa… Medium Thu, 27 Aug 2026 18:04:50 GMT https://vulnogram.org/CVE-2026-59321 https://vulnogram.org/CVE-2026-59321 A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null (not thread-safe, e.g. the Kotlin kts engine), concurrent message processing can corrupt engine-internal state, pote… Medium Thu, 27 Aug 2026 18:04:49 GMT https://vulnogram.org/CVE-2026-59320 https://vulnogram.org/CVE-2026-59320 When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. After initialCredits (default 100) failing messages the receiver's credit reaches… Medium Thu, 27 Aug 2026 18:04:47 GMT https://vulnogram.org/CVE-2026-59319 https://vulnogram.org/CVE-2026-59319 RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values without applying RediSearchUtil.escape(), unlike get(), clear(), and findByTimeRange() in the same class which do escape their inpu… Medium Thu, 27 Aug 2026 18:04:46 GMT https://vulnogram.org/CVE-2026-59317 https://vulnogram.org/CVE-2026-59317 DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigInteger(header.value()) with no length or format validation. Spring for Apache Kafka 4.1.0… Medium Thu, 27 Aug 2026 18:04:46 GMT https://vulnogram.org/CVE-2026-59316 https://vulnogram.org/CVE-2026-59316 Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When using the DefaultConsentPage, an attacker can craft an OAuth2 authorization request containing a malicious value that is stored serve… High Network Exploitable Thu, 27 Aug 2026 18:04:44 GMT https://vulnogram.org/CVE-2026-59315 https://vulnogram.org/CVE-2026-59315 The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier Medium Network Exploitable Thu, 27 Aug 2026 18:04:42 GMT https://vulnogram.org/CVE-2026-59314 https://vulnogram.org/CVE-2026-59314 Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.… Low Network Exploitable Thu, 27 Aug 2026 18:04:41 GMT https://vulnogram.org/CVE-2026-59311 https://vulnogram.org/CVE-2026-59311 A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer as a symlink before the application starts. Spring Integration 7.1.0 Spring Integration 7.… Medium Thu, 27 Aug 2026 18:04:40 GMT https://vulnogram.org/CVE-2026-59306 https://vulnogram.org/CVE-2026-59306 Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 Low Thu, 27 Aug 2026 18:04:39 GMT https://vulnogram.org/CVE-2026-59313 https://vulnogram.org/CVE-2026-59313 Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE). Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0… Critical Network Exploitable Thu, 27 Aug 2026 17:58:03 GMT https://vulnogram.org/CVE-2026-59307 https://vulnogram.org/CVE-2026-59307 An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restrict deserialization receives no protection at all when the store is a Spring-managed bean. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5… High Thu, 27 Aug 2026 17:58:02 GMT https://vulnogram.org/CVE-2026-59305 https://vulnogram.org/CVE-2026-59305 Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 Low Thu, 27 Aug 2026 17:58:01 GMT https://vulnogram.org/CVE-2026-59304 https://vulnogram.org/CVE-2026-59304 Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 Low Thu, 27 Aug 2026 17:58:00 GMT https://vulnogram.org/CVE-2026-59303 https://vulnogram.org/CVE-2026-59303 Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 Low Thu, 27 Aug 2026 17:57:59 GMT https://vulnogram.org/CVE-2026-59302 https://vulnogram.org/CVE-2026-59302 Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6 Low Thu, 27 Aug 2026 17:57:58 GMT https://vulnogram.org/CVE-2026-59301 https://vulnogram.org/CVE-2026-59301 Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Low Thu, 27 Aug 2026 17:57:57 GMT https://vulnogram.org/CVE-2026-59300 https://vulnogram.org/CVE-2026-59300 Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier Low Thu, 27 Aug 2026 17:57:57 GMT https://vulnogram.org/CVE-2026-59299 https://vulnogram.org/CVE-2026-59299 Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier Low Thu, 27 Aug 2026 17:57:56 GMT https://vulnogram.org/CVE-2026-59298 https://vulnogram.org/CVE-2026-59298 Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier Low Thu, 27 Aug 2026 17:57:55 GMT https://vulnogram.org/CVE-2026-59297 https://vulnogram.org/CVE-2026-59297 Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Low Thu, 27 Aug 2026 17:57:53 GMT https://vulnogram.org/CVE-2026-59294 https://vulnogram.org/CVE-2026-59294 ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to new File(resourceParentFolder, newFileName) before writing the downloa… Medium Thu, 27 Aug 2026 17:57:52 GMT https://vulnogram.org/CVE-2026-59293 https://vulnogram.org/CVE-2026-59293 Unless the application explicitly raises smbMinVersion, the jCIFS client will negotiate down to SMB1/CIFS, which lacks mandatory signing/encryption and is vulnerable to NTLM relay and content-tampering MITM. Spring Integration 7.1.0 Spring Integratio… Medium Thu, 27 Aug 2026 17:57:51 GMT https://vulnogram.org/CVE-2026-59292 https://vulnogram.org/CVE-2026-59292 PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdir}/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0… Low Thu, 27 Aug 2026 17:57:50 GMT https://vulnogram.org/CVE-2026-59291 https://vulnogram.org/CVE-2026-59291 Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Low Thu, 27 Aug 2026 17:57:48 GMT https://vulnogram.org/CVE-2026-59289 https://vulnogram.org/CVE-2026-59289 Spring for GraphQL's Spring Data pagination support resolves arguments of a scrollable query and forwards the client-supplied values to the underlying repository. An attacker can forge a malicious query for a Connection field that can exhaust applica… High Network Exploitable Thu, 27 Aug 2026 17:57:47 GMT https://vulnogram.org/CVE-2026-59288 https://vulnogram.org/CVE-2026-59288 The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malicious URL so that the victim's browser might leak confidential information to the attacker's website. Spring for… High Network Exploitable Thu, 27 Aug 2026 17:57:46 GMT https://vulnogram.org/CVE-2026-59287 https://vulnogram.org/CVE-2026-59287 Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled. Spring for GraphQL 2.0.0 - 2.0.4 Spring for GraphQL 1.4.0 - 1.4.6 Spring for GraphQL 1.3.0 - 1.3.9 Medium Network Exploitable Thu, 27 Aug 2026 17:57:45 GMT https://vulnogram.org/CVE-2026-59286 https://vulnogram.org/CVE-2026-59286 The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, without Subresource Integrity checks. An attacker can inject malicious code in those scripts and execute arbitrary code on the browser loading the GraphiQ… High Network Exploitable Thu, 27 Aug 2026 17:57:44 GMT https://vulnogram.org/CVE-2026-59285 https://vulnogram.org/CVE-2026-59285 Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. Spring for GraphQL 2.0.0 - 2.0.4 High Network Exploitable Thu, 27 Aug 2026 17:57:43 GMT https://vulnogram.org/CVE-2026-59284 https://vulnogram.org/CVE-2026-59284 There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled. Spring Cloud Commons 5.0.0 - 5.0.2 Spring Cloud Commons 4.3.0 - 4.3.3 Spring Cloud Commons 4.0.0 - 4.2.6 Spring Cloud Commons 3.1.10 and earlier Medium Thu, 27 Aug 2026 17:57:42 GMT https://vulnogram.org/CVE-2026-59283 https://vulnogram.org/CVE-2026-59283 Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2… Critical Network Exploitable Thu, 27 Aug 2026 17:57:40 GMT https://vulnogram.org/CVE-2026-59282 https://vulnogram.org/CVE-2026-59282 Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service (DoS) attack. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.… High Network Exploitable Thu, 27 Aug 2026 17:57:38 GMT https://vulnogram.org/CVE-2026-59281 https://vulnogram.org/CVE-2026-59281 Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors() or Errors.getFieldError() accessors are vulnerable to arbitrary HTML/… Medium Network Exploitable Thu, 27 Aug 2026 17:57:37 GMT https://vulnogram.org/CVE-2026-59277 https://vulnogram.org/CVE-2026-59277 Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal (private) or external (public) network. Spring S… Low Network Exploitable Thu, 27 Aug 2026 17:57:36 GMT https://vulnogram.org/CVE-2026-59276 https://vulnogram.org/CVE-2026-59276 Several components in Spring Security compare security-sensitive values using standard string equality (String.equals()) rather than a constant-time comparison. Because String.equals() returns as soon as it finds a differing character, the time taken… Medium Network Exploitable Thu, 27 Aug 2026 17:57:34 GMT https://vulnogram.org/CVE-2026-59280 https://vulnogram.org/CVE-2026-59280 Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through SpringTemplateLoade… Medium Thu, 27 Aug 2026 16:41:09 GMT https://vulnogram.org/CVE-2026-59272 https://vulnogram.org/CVE-2026-59272 Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documented default, is exposed to man-in-the-middle interception of every log event. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spr… Medium Thu, 27 Aug 2026 16:41:08 GMT https://vulnogram.org/CVE-2026-59355 https://vulnogram.org/CVE-2026-59355 In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a request containing an invalid request_uri paired with an unvalidated red… Medium Network Exploitable Thu, 27 Aug 2026 06:35:09 GMT https://vulnogram.org/CVE-2026-59354 https://vulnogram.org/CVE-2026-59354 In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs insufficient validation of certain client metadata fields supplied by… Critical Thu, 27 Aug 2026 06:33:03 GMT https://vulnogram.org/CVE-2026-47893 https://vulnogram.org/CVE-2026-47893 A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1… High Network Exploitable Thu, 27 Aug 2026 05:21:41 GMT https://vulnogram.org/CVE-2026-47892 https://vulnogram.org/CVE-2026-47892 A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.2… Critical Network Exploitable Thu, 27 Aug 2026 05:21:40 GMT