DeutschShown in its original language — a full translation is planned for a future version.
VMware Tanzu Spring Boot: Mehrere Schwachstellen
view advisory published 2026-06-10
Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in VMware Tanzu Spring Boot ausnutzen, um Sicherheitsvorkehrungen zu umgehen Informationen offenzulegen und zu manipulieren oder potentiell Code auszuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-41001US | — | — | ||
Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's data directory when no explicit path is configured. A local at… | ||||
| CVE-2026-40992US | — | — | ||
Spring Boot's Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.chec… | ||||
02
references
External citations — patches, advisories, analysis.
- Spring Blog vom 2026-06-10external
- Spring Blog vom 2026-06-10external
- Spring Boot Security Advisory vom 2026-06-10external
- Spring Boot Security Advisory vom 2026-06-10external
- WID-SEC-W-2026-1883 - CSAF Versionself
- WID-SEC-2026-1883 - Portal Versionself
- IBM Security Bulletin 7283059 vom 2026-08-10external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan