Back Feeds.4Sysops

Critical VMware Tanzu Spring flaws expose administrator access and isolated data

Feeds.4Sysops •IT News • August 24, 2026

VMware Tanzu Spring software is facing a broad wave of security fixes, including a critical LDAP flaw that can grant administrator access and let attackers alter user identities. Additional weaknesses affect Spring Security, Spring AI, and Spring GraphQL, while CERT-Bund has separately reported multiple Spring Framework denial-of-service flaws rated CVSS 6.5; no exploitation has been confirmed so far. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in VMware Tanzu Spring Software Expose Admin Access VMware Tanzu Spring software has multiple security vulnerabilities requiring urgent updates. A critical LDAP flaw (CVE-2026-59270) can grant attackers administrator access, allowing them to alter user identities. Other vulnerabilities affect Spring Security, Spring AI, and Spring GraphQL, with CVEs rated high for potential exploitation. No confirmed exploitation has been reported as of now. Administrators are advised to review the Spring website for specific details on affected versions and patches. The vulnerabilities are primarily rated as medium, with one critical and several high-risk issues identified. CERT-Bund has also reported multiple denial-of-service flaws in the Spring Framework. The situation remains serious, necessitating immediate attention from system administrators. 2 sources 71

Critical VMware Tanzu Spring flaws expose administrator access and isolated data

The full story

Extracted Entities

Attack Types (1)

Platforms (5)