Skip to content

CVE-2026-22718

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
January 14, 2026
Last Seen
January 14, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A command injection vulnerability in the Spring CLI VSCode extension allows attackers to execute arbitrary commands on affected machines. This flaw, tracked as CVE-2026-22718, impacts developers using version 0.9.0 and earlier of the tool, which has reached its end-of-life. The vulnerability is cate...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Entities