CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

[NEW] [medium] VMware Tanzu Spring Cloud: Multiple vulnerabilities

mediumCVE-2026-47836CVE-2026-47837CVE-2026-47879CVE-2026-47894CVE-2026-59284CVE-2026-59291
An attacker can exploit multiple vulnerabilities in VMware Tanzu Spring Cloud to manipulate files, disclose information, and bypass security measures.

CSIRTS triage

vendor: VMwareproduct: Tanzu Spring CloudCode injectionInformation disclosureAuthentication bypass
What
Multiple vulnerabilities in VMware Tanzu Spring Cloud allow file manipulation, information disclosure, and security bypass.
Who is affected
Applications using VMware Tanzu Spring Cloud are affected.
Urgency
Medium priority; information disclosure and security bypass require timely patching.
Action
Apply VMware security patches for all listed CVEs affecting Tanzu Spring Cloud.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Tanzu Spring Cloud

Get an email when a new Tanzu Spring Cloud advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity
medium
Published
2026-08-21
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2952

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-47836coverage & exploitation statusNVD · CVE.org
CVE-2026-47837coverage & exploitation statusNVD · CVE.org
CVE-2026-47879coverage & exploitation statusNVD · CVE.org
CVE-2026-47894coverage & exploitation statusNVD · CVE.org
CVE-2026-59284coverage & exploitation statusNVD · CVE.org
CVE-2026-59291coverage & exploitation statusNVD · CVE.org
CVE-2026-59297coverage & exploitation statusNVD · CVE.org
CVE-2026-59298coverage & exploitation statusNVD · CVE.org
CVE-2026-59299coverage & exploitation statusNVD · CVE.org
CVE-2026-59300coverage & exploitation statusNVD · CVE.org
CVE-2026-59301coverage & exploitation statusNVD · CVE.org
CVE-2026-59302coverage & exploitation statusNVD · CVE.org
CVE-2026-59303coverage & exploitation statusNVD · CVE.org
CVE-2026-59304coverage & exploitation statusNVD · CVE.org
CVE-2026-59306coverage & exploitation statusNVD · CVE.org

More from CERT-Bund (BSI) Security Advisories