CVE-2026-59301: VMware Spring Cloud Function

Medium severity, CVSS 4.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7

Affected products

• VMware Spring Cloud Function: from 4.2.0, before 4.2.8 (fixed in 4.2.8); from 4.3.0, before 4.3.5 (fixed in 4.3.5); from 5.0.0, before 5.0.4 (fixed in 5.0.4)

Published 2026-08-27. Last modified 2026-09-04.