Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how vmware compares to other vendors in security performance

View Risk Score →

Software

vmware workstation and esxi
210
vmware fusion
139
vmware esxi
120
vmware workstation
117
vmware vcenter server and cloud foundation
105
vmware esxi and horizon daas
103
vmware player
92
vmware vcenter
79
vmware spring framework
68
vmware vsphere
65
vmware server
60
vmware cloud foundation
59
vmware horizon
56
vmware vrealize operations
54
vmware ace
47
vmware esx
40
vmware harbor container registry
29
vmware vcenter server
27
vmware workspace one access and identity manager
27
vmware spring security
25
vmware vrealize log insight
23
vmware vrealize suite lifecycle manager
21
vmware site recovery manager
20
vmware vrealize automation
20
vmware vcenter server appliance
18
vmware spring boot
17
vmware horizon client
16
vmware spring ai
16
vmware horizon view
13
vmware identity manager connector
13
vmware tools
13
vmware telco cloud platform
12
vmware access
11
vmware workspace one launcher
11
vmware avi load balancer
10
vmware spring data rest
10
vmware workspace one access
10
vmware aria operations
9
vmware velocloud orchestrator
9
vmware vcloud director
8
vmware rabbitmq
7
vmware spring cloud config
7
vmware telco cloud infrastructure
7
vmware vsphere data protection
7
vmware workstation player
7
vmware aria automation
6
vmware aria operations for networks
6
vmware gsx server
6
vmware movie decoder
6
vmware nsx
6

VMware Avi Load BalancerVMware Avi Load Balancer Directory Traversal Vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2026-47871

VMware Avi Load BalancerVMware Avi Load Balancer Privilege Escalation Vulnerability

Risk 48
Severity
7.1
First published (updated )
CVE-2026-47870

VMware Avi Load BalancerVMware Avi Load Balancer Remote Code Execution Vulnerability

Risk 59
Severity
8.7
First published (updated )
CVE-2026-47869

VMware Avi Load BalancerVMware Avi Load Balancer Local Privilege Escalation Vulnerability

Risk 69
Severity
7.8
First published (updated )
CVE-2026-47868

VMware Avi Load BalancerVMware Avi Load Balancer Remote Code Execution Vulnerability

Risk 59
Severity
8.7
First published (updated )
CVE-2026-47867
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Avi Load BalancerVMware Avi Load Balancer Authorization Bypass Vulnerability

Risk 69
Severity
8.3
First published (updated )
CVE-2026-47866

VMware Avi Load BalancerVMware Avi Load Balancer Authentication Bypass Vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2026-47865

VMware RabbitMQRabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom

Risk 79
Severity
7
First published (updated )
CVE-2026-57215

VMware RabbitMQRabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size

Risk 44
Severity
7.1
First published (updated )
CVE-2026-57212

VMware Spring AiSpring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

Risk 64
Severity
8.6
First published (updated )
CVE-2026-47835
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring For GraphqlSpring GraphQL Annotation Detection Vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41856

VMware Spring For GraphqlCross-Site WebSocket Hijacking in Spring for GraphQL

Risk 59
Severity
8.1
First published (updated )
CVE-2026-41700

VMware Spring For GraphqlUnsafe Deserialization in Spring GraphQL

Risk 86
Severity
9.8
First published (updated )
CVE-2026-41699

VMware Spring BootMail Auto-Configuration Does Not Enable SSL Hostname Verification

Risk 39
Severity
5
First published (updated )
CVE-2026-40992

VMware Spring SecurityUnauthorized User Impersonation when Using X.509 Client Certificates

Risk 60
Severity
8.1
First published (updated )
CVE-2026-47838
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring Data RESTSpring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keys

Risk 27
Severity
5.3
First published (updated )
CVE-2026-41837

VMware Spring For Apache PulsarIn Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserialization

Risk 75
Severity
8.1
First published (updated )
CVE-2026-41732

VMware Spring For Apache KafkaIn Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization

Risk 75
Severity
8.1
First published (updated )
CVE-2026-41731

VMware Spring Data RESTSpring Data REST exposes persistence-layer internals in error responses

Risk 27
Severity
5.3
First published (updated )
CVE-2026-41730

VMware Spring Data RESTSpring Data REST SpEL Injection via Map Key in JSON Patch

Risk 60
Severity
8.1
First published (updated )
CVE-2026-41729
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring Data RESTSpring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collections

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41728

VMware Spring For Apache KafkaIn Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behavior

Risk 38
Severity
6.5
First published (updated )
CVE-2026-41727

VMware Spring For Apache KafkaIn Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header

Risk 38
Severity
6.5
First published (updated )
CVE-2026-41726

VMware Spring Data MongoDBSpring Data MongoDB - SpEL Expression Injection via Annotated Query Parameter Binding

Risk 75
Severity
8.1
First published (updated )
CVE-2026-41717

VMware Spring Advanced Message Queuing ProtocolIn Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager

Risk 22
Severity
4
First published (updated )
CVE-2026-41714
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring SecurityOpen Redirect When Using CookieRequestCache

Risk 38
Severity
6.1
First published (updated )
CVE-2026-41706

VMware Spring Data MongoDBSpring Data MongoDB Bind Parameter Literal Quoting Breakout

Risk 35
Severity
5.9
First published (updated )
CVE-2026-41696

VMware Spring SecuritySAML Payloads Decrypted Without Valid Signature

Risk 27
Severity
5.3
First published (updated )
CVE-2026-41694

maven/org.springframework.security/spring-securitySpring Security Authorization Server Open Redirect via request_uri

Risk 38
Severity
6.1
First published (updated )
CVE-2026-41008

VMware Spring SecurityUnencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting

Risk 49
Severity
7.6
First published (updated )
CVE-2026-41003
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203