Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how vmware compares to other vendors in security performance

View Risk Score →

Software

vmware workstation and esxi
89
vmware fusion
67
vmware vcenter server and cloud foundation
54
vmware workstation
47
vmware vsphere
44
vmware esxi
39
vmware esxi and horizon daas
38
vmware vcenter
29
vmware spring framework
27
vmware vrealize operations
25
vmware player
22
vmware server
18
vmware esx
17
vmware workspace one access and identity manager
15
vmware cloud foundation
14
vmware spring security
13
vmware vrealize suite lifecycle manager
12
vmware spring ai
11
vmware ace
9
vmware avi load balancer
8
vmware horizon
8
vmware telco cloud platform
8
vmware tools
8
vmware workspace one access
8
vmware access
7
vmware horizon view
7
vmware identity manager connector
7
vmware workspace one launcher
7
vmware aria operations
6
vmware vrealize automation
6
vmware horizon client
5
vmware spring boot
5
vmware telco cloud infrastructure
5
vmware velocloud orchestrator
5
vmware workstation player
5
vmware fusion pro
4
vmware rabbitmq
4
vmware spring data rest
4
vmware view
4
vmware vrealize log insight
4
vmware workstation pro
4
vmware aria automation
3
vmware gsx server
3
vmware installbuilder
3
vmware photon os
3
vmware remote console
3
vmware remote console plug-in
3
vmware spring boot tools
3
vmware spring cloud config
3
vmware vcloud director
3

VMware Avi Load BalancerVMware Avi Load Balancer Directory Traversal Vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2026-47871

VMware Avi Load BalancerVMware Avi Load Balancer Privilege Escalation Vulnerability

Risk 48
Severity
7.1
First published (updated )
CVE-2026-47870

VMware Avi Load BalancerVMware Avi Load Balancer Remote Code Execution Vulnerability

Risk 59
Severity
8.7
First published (updated )
CVE-2026-47869

VMware Avi Load BalancerVMware Avi Load Balancer Local Privilege Escalation Vulnerability

Risk 69
Severity
7.8
First published (updated )
CVE-2026-47868

VMware Avi Load BalancerVMware Avi Load Balancer Remote Code Execution Vulnerability

Risk 59
Severity
8.7
First published (updated )
CVE-2026-47867
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Avi Load BalancerVMware Avi Load Balancer Authorization Bypass Vulnerability

Risk 69
Severity
8.3
First published (updated )
CVE-2026-47866

VMware RabbitMQRabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom

Risk 79
Severity
7
First published (updated )
CVE-2026-57215

VMware RabbitMQRabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size

Risk 44
Severity
7.1
First published (updated )
CVE-2026-57212

VMware Spring AiSpring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

Risk 64
Severity
8.6
First published (updated )
CVE-2026-47835

VMware Spring For GraphqlSpring GraphQL Annotation Detection Vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41856
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring For GraphqlCross-Site WebSocket Hijacking in Spring for GraphQL

Risk 59
Severity
8.1
First published (updated )
CVE-2026-41700

VMware Spring SecurityUnauthorized User Impersonation when Using X.509 Client Certificates

Risk 60
Severity
8.1
First published (updated )
CVE-2026-47838

VMware Spring For Apache PulsarIn Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserialization

Risk 75
Severity
8.1
First published (updated )
CVE-2026-41732

VMware Spring For Apache KafkaIn Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization

Risk 75
Severity
8.1
First published (updated )
CVE-2026-41731

VMware Spring Data RESTSpring Data REST SpEL Injection via Map Key in JSON Patch

Risk 60
Severity
8.1
First published (updated )
CVE-2026-41729
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring Data RESTSpring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collections

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41728

VMware Spring Data MongoDBSpring Data MongoDB - SpEL Expression Injection via Annotated Query Parameter Binding

Risk 75
Severity
8.1
First published (updated )
CVE-2026-41717

VMware Spring SecurityUnencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting

Risk 49
Severity
7.6
First published (updated )
CVE-2026-41003

Spring Spring SecurityUnfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database Entry

Risk 50
Severity
7.3
First published (updated )
CVE-2026-40993

VMware Spring SecurityUnbounded DEFLATE Inflation in SAML 2.0 Service Provider

Risk 43
Severity
7.5
First published (updated )
CVE-2026-40988
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring HateoasSpring HATEOAS heap exhaustion through unbounded internal caching

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41007

VMware Spring HateoasSpring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configuration

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41006

VMware Spring FrameworkSpring Framework Denial of Service via Unbounded Cache in SpEL

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41851

VMware Spring FrameworkSpring Framework Algorithmic Denial of Service via SpEL Expressions

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41850

VMware Spring FrameworkSpring Framework Denial of Service via Integer Overflow in SpEL Expressions

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41849
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring FrameworkSpring Framework Denial of Service via AntPathMatcher

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41848

VMware Spring FrameworkSpring Framework Cross-site Scripting via JavaScriptUtils

Risk 47
Severity
7.1
First published (updated )
CVE-2026-41845

VMware Spring FrameworkSpring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41842

VMware Spring FrameworkSpring Framework Predictable Session ID in WebSocket Module

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41838

VMware VMware Cloud Foundation OperationsVMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

Risk 71
Severity
8
First published (updated )
CVE-2026-41724
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203