CVE-20XX-?

VMware Spring Framework CVEs.

Published CVEs affecting VMware Spring Framework, ranked by exploit odds.

1 CVEs · updated 2026-11-06 09:09 UTC

Reset all
  1. CVE-2026-41855

    In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter allow arbitrary class instantiation, which can lead to unauthorized actions via gadget class deserialization. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.

    Code execution VMware Spring Framework

    8.1 HIGH 0.3% exploit odds Fix listed

All CVEs affecting VMware Spring Framework that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.