CVE-2026-59277: VMware Spring Security

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal (private) or external (public) network. Spring Security 7.1.0

Affected products

• VMware Spring Security: from 7.1.0, before 7.1.0.1 (fixed in 7.1.0.1)

Published 2026-08-27. Last modified 2026-09-02.