#vmware
5 articles
CVE-2026-59346: VM Escape in VMware Workstation and Fusion
An integer overflow in VMware Workstation and Fusion lets an attacker with administrative privileges in a virtual machine with a VMXNET3 network adapter execute code on the host...
CVE-2026-47865: authentication bypass granting Avi Control plane access in VMware Avi Load Balancer (CVSS 9.8)
VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism. A...
CVE-2026-40982: Directory Traversal in VMware Spring Cloud Config
Directory traversal vulnerability in VMware Spring Cloud Config (versions 3.1.0-3.1.13 and 4.1.0-4.1.9) allows attackers with crafted URLs to access arbitrary files via the spring-cloud-config-server module...
CVE-2026-22738: SpEL injection in Spring AI SimpleVectorStore
In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code. ...
CVE-2026-22732: Critical Vulnerability in VMware Spring Security - Immediate Update Required
When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. This issue affects Spring Security:...