CVE-20XX-?

VMware Spring Framework CVEs.

Published CVEs affecting VMware Spring Framework, ranked by exploit odds.

1 CVEs · updated 2026-11-06 10:55 UTC

Reset all
  1. CVE-2026-41838

    IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.

    Crypto Library VMware Spring Framework

    4.8 MEDIUM 0.2% exploit odds Fix listed

All CVEs affecting VMware Spring Framework that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.