Advisories · Technology

VMware Spring Data Geode.

Every CVE that names VMware Spring Data Geode among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-2818 CVE record

CVSS 8.2 High

Zip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific)
- VMware Spring Data Geode
- VMware Spring Data Gemfire
- Path traversal
Not analysed yet 20 Feb 2026
CVE-2026-2817 CVE record

CVSS 4.8 Medium

Spring Data Geode Insecure Temporary Directory Usage
- VMware Spring Data Geode
- VMware Spring Data Gemfire
- Information disclosure
- CWE-378
Not analysed yet 19 Feb 2026