Ce mail provient de l'extérieur, restons vigilants ===================================================================== CERT-Renater Note d'Information No. 2026/VULN1003 _____________________________________________________________________ DATE : 09/10/2026 HARDWARE PLATFORM(S): / OPERATING SYSTEM(S): Systems running VMware Tanzu for Valkey on Kubernetes versions prior to 3.5.1, VMware Tanzu for Valkey versions prior to 8.0.11, 8.1.10, 9.0.6, 9.1.2, Spring Cloud Gateway for Kubernetes versions prior to 2.2.17, VMware Tanzu for Postgres on Kubernetes versions prior to 4.5.2, VMware Spring Cloud Data Flow for Kubernetes versions prior to 1.6.16. ==================================================================== https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39109 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39110 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39111 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39112 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39113 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39114 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39115 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39108 _____________________________________________________________________ Product Release Advisory - VMware Tanzu for Valkey on Kubernetes 3.5.1 Product/Component VMware Tanzu Data Intelligence VMware Tanzu Data Services VMware Tanzu Data Services Solutions VMware Tanzu Data Suite VMware Tanzu for Valkey VMware Tanzu Platform Vmware Tanzu Platform - SM Notification Id 39109 Last Updated 01 October 2026 Initial Publication Date 01 October 2026 Status CLOSED Severity CRITICAL CVSS Base Score 9.3 WorkAround N/A Affected CVE See CVE list in advisory Product Release Advisory - VMware Tanzu for Valkey on Kubernetes 3.5.1 Advisory ID TNZ-2026-0920 Tanzu Issue Date 2026-10-01 Updated on Highest Score CVE from list below advisory details Severity Critical CVSS V4 Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS V4 Score 9.3 (Sev: CRITICAL) CVSS V3.1 Vector Unavailable CVSS V3.1 Score Unavailable (Sev: Unavailable) CVSS V2 Vector Unavailable CVSS V2 Score Unavailable (Sev: Unavailable) Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability not having the vector or being GHSA or BDSA without a matching CVE for nvd lookup. Product Version Release Advisory Product Release VMware Tanzu for Valkey on Kubernetes 3.5.1 Product Release Notes: https://techdocs.broadcom.com/ Security Fixes: This release has the following security fixes, listed by component. Component Vulnerabilities Resolved tanzu-valkey-on-kubernetes CVE-2026-63374 (Critical) CVE-2026-102268 (Critical) CVE-2026-97689 (High) CVE-2026-25589 (High) CVE-2026-25588 (High) CVE-2026-69192 (High) CVE-2026-82049 (High) CVE-2026-11972 (High) CVE-2026-11940 (High) CVE-2026-11824 (High) CVE-2026-11822 (High) CVE-2026-97687 (High) CVE-2026-69152 (High) CVE-2026-58043 (High) CVE-2026-56848 (High) CVE-2026-56846 (High) CVE-2026-15308 (High) CVE-2026-14257 (High) CVE-2026-14164 (High) GO-2026-6355 (High) GO-2026-6354 (High) GO-2026-6303 (High) CVE-2026-102273 (High) CVE-2026-102272 (High) CVE-2026-102271 (High) CVE-2026-102267 (High) CVE-2026-102266 (High) CVE-2026-58014 (High) CVE-2026-54272 (High) CVE-2026-16118 (High) CVE-2026-97688 (Medium) CVE-2026-64847 (Medium) CVE-2026-58013 (Medium) CVE-2026-58012 (Medium) CVE-2026-58011 (Medium) CVE-2026-58010 (Medium) CVE-2026-103001 (Medium) CVE-2026-54371 (Medium) CVE-2026-19672 (Medium) CVE-2026-41991 (Medium) CVE-2026-17084 (Medium) CVE-2026-15806 (Medium) CVE-2026-6653 (Medium) CVE-2026-58015 (Medium) CVE-2026-102274 (Medium) CVE-2025-15367 (Medium) CVE-2025-15366 (Medium) CVE-2026-87910 (Medium) CVE-2026-13346 (Medium) CVE-2026-0864 (Medium) CVE-2026-4360 (Medium) CVE-2026-15588 (Medium) CVE-2026-12003 (Medium) CVE-2026-102265 (Medium) CVE-2026-101918 (Medium) CVE-2026-101917 (Medium) CVE-2026-5704 (Medium) CVE-2026-11979 (Medium) CVE-2026-102269 (Medium) CVE-2026-18508 (Medium) CVE-2026-18477 (Medium) CVE-2026-102270 (Medium) CVE-2026-41992 (Low) CVE-2025-46686 (Low) CVE-2026-4539 (Low) GO-2026-5024 (Low) CVE-2026-18503 (Low) CVE-2026-15310 (Low) CVE-2026-6879 (Low) _____________________________________________________________________ Product Release Advisory - VMware Tanzu for Valkey 8.0.11 Product/Component VMware Tanzu Data Intelligence VMware Tanzu Data Services VMware Tanzu Data Services Solutions VMware Tanzu Data Suite VMware Tanzu for Valkey Notification Id 39110 Last Updated 01 October 2026 Initial Publication Date 01 October 2026 Status CLOSED Severity HIGH CVSS Base Score 7.5 WorkAround N/A Affected CVE See CVE list in advisory Product Release Advisory - VMware Tanzu for Valkey 8.0.11 Advisory ID TNZ-2026-0921 Tanzu Issue Date 2026-10-01 Updated on Highest Score CVE from list below advisory details Severity High CVSS V4 Vector Unavailable CVSS V4 Score Unavailable (Sev: Unavailable) CVSS V3.1 Vector Unavailable CVSS V3.1 Score Unavailable (Sev: Unavailable) CVSS V2 Vector Unavailable CVSS V2 Score Unavailable (Sev: Unavailable) Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability not having the vector or being GHSA or BDSA without a matching CVE for nvd lookup. Product Version Release Advisory Product Release VMware Tanzu for Valkey 8.0.11 Product Release Notes: https://techdocs.broadcom.com/ Security Fixes: This release has the following security fixes, listed by component. Component Vulnerabilities Resolved tanzu-valkey GO-2026-6355 (High) GO-2026-6354 (High) GO-2026-6303 (High) _____________________________________________________________________ Product Release Advisory - VMware Tanzu for Valkey 8.1.10 Product/Component VMware Tanzu Data Intelligence VMware Tanzu Data Services VMware Tanzu Data Services Solutions VMware Tanzu Data Suite VMware Tanzu for Valkey Notification Id 39111 Last Updated 01 October 2026 Initial Publication Date 01 October 2026 Status CLOSED Severity HIGH CVSS Base Score 7.5 WorkAround N/A Affected CVE See CVE list in advisory Product Release Advisory - VMware Tanzu for Valkey 8.1.10 Advisory ID TNZ-2026-0922 Tanzu Issue Date 2026-10-01 Updated on Highest Score CVE from list below advisory details Severity High CVSS V4 Vector Unavailable CVSS V4 Score Unavailable (Sev: Unavailable) CVSS V3.1 Vector Unavailable CVSS V3.1 Score Unavailable (Sev: Unavailable) CVSS V2 Vector Unavailable CVSS V2 Score Unavailable (Sev: Unavailable) Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability not having the vector or being GHSA or BDSA without a matching CVE for nvd lookup. Product Version Release Advisory Product Release VMware Tanzu for Valkey 8.1.10 Product Release Notes: https://techdocs.broadcom.com/ Security Fixes: This release has the following security fixes, listed by component. Component Vulnerabilities Resolved tanzu-valkey GO-2026-6355 (High) GO-2026-6354 (High) GO-2026-6303 (High) _____________________________________________________________________ Product Release Advisory - VMware Tanzu for Valkey 9.0.6 Product/Component VMware Tanzu Data Intelligence VMware Tanzu Data Services VMware Tanzu Data Services Solutions VMware Tanzu Data Suite VMware Tanzu for Valkey Notification Id 39112 Last Updated 01 October 2026 Initial Publication Date 01 October 2026 Status CLOSED Severity HIGH CVSS Base Score 7.5 WorkAround N/A Affected CVE See CVE list in advisory Product Release Advisory - VMware Tanzu for Valkey 9.0.6 Advisory ID TNZ-2026-0923 Tanzu Issue Date 2026-10-01 Updated on Highest Score CVE from list below advisory details Severity High CVSS V4 Vector Unavailable CVSS V4 Score Unavailable (Sev: Unavailable) CVSS V3.1 Vector Unavailable CVSS V3.1 Score Unavailable (Sev: Unavailable) CVSS V2 Vector Unavailable CVSS V2 Score Unavailable (Sev: Unavailable) Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability not having the vector or being GHSA or BDSA without a matching CVE for nvd lookup. Product Version Release Advisory Product Release VMware Tanzu for Valkey 9.0.6 Product Release Notes: https://techdocs.broadcom.com/ Security Fixes: This release has the following security fixes, listed by component. Component Vulnerabilities Resolved tanzu-valkey GO-2026-6355 (High) GO-2026-6354 (High) GO-2026-6303 (High) _____________________________________________________________________ Product Release Advisory - VMware Tanzu for Valkey 9.1.2 Product/Component VMware Tanzu Data Intelligence VMware Tanzu Data Services VMware Tanzu Data Services Solutions VMware Tanzu Data Suite VMware Tanzu for Valkey Notification Id 39113 Last Updated 01 October 2026 Initial Publication Date 01 October 2026 Status CLOSED Severity HIGH CVSS Base Score 7.5 WorkAround N/A Affected CVE See CVE list in advisory Product Release Advisory - VMware Tanzu for Valkey 9.1.2 Advisory ID TNZ-2026-0924 Tanzu Issue Date 2026-10-01 Updated on Highest Score CVE from list below advisory details Severity High CVSS V4 Vector Unavailable CVSS V4 Score Unavailable (Sev: Unavailable) CVSS V3.1 Vector Unavailable CVSS V3.1 Score Unavailable (Sev: Unavailable) CVSS V2 Vector Unavailable CVSS V2 Score Unavailable (Sev: Unavailable) Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability not having the vector or being GHSA or BDSA without a matching CVE for nvd lookup. Product Version Release Advisory Product Release VMware Tanzu for Valkey 9.1.2 Product Release Notes: https://techdocs.broadcom.com/ Security Fixes: This release has the following security fixes, listed by component. Component Vulnerabilities Resolved tanzu-valkey GO-2026-6355 (High) GO-2026-6354 (High) GO-2026-6303 (High) _____________________________________________________________________ Product Release Advisory - Spring Cloud Gateway for Kubernetes 2.2.17 Product/Component App Suite Azure Spring Enterprise Pivotal Web Server Support Only for Apache HTTP Support Only for Apache Tomcat Tanzu Kubernetes Runtime VMware Tanzu Advanced VMware Tanzu Application Catalog VMware Tanzu Application Platform VMware Tanzu Application Service VMware Tanzu Kubernetes Grid Integrated Edition VMware Tanzu Platform VMware Tanzu Platform - Cloud Foundry VMware Tanzu Platform - Kubernetes VMware Tanzu Platform - SaaS Components Vmware Tanzu Platform - SM VMware Tanzu Platform Spring VMware Tanzu Platform - TAP VMware Tanzu Spring Essentials VMware Tanzu Spring Runtime VMware Tanzu Spring Runtime - SM VMware Tanzu Spring SaaS VMware Tanzu tc Server VMware vFabric Notification Id 39114 Last Updated 01 October 2026 Initial Publication Date 01 October 2026 Status CLOSED Severity CRITICAL CVSS Base Score 10 WorkAround N/A Affected CVE See CVE list in advisory Product Release Advisory - Spring Cloud Gateway for Kubernetes 2.2.17 Advisory ID TNZ-2026-0925 Tanzu Issue Date 2026-10-01 Updated on Highest Score CVE from list below advisory details Severity Critical CVSS V4 Vector Unavailable CVSS V4 Score Unavailable (Sev: Unavailable) CVSS V3.1 Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L CVSS V3.1 Score 10.0 (Sev: CRITICAL) CVSS V2 Vector Unavailable CVSS V2 Score Unavailable (Sev: Unavailable) Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability not having the vector or being GHSA or BDSA without a matching CVE for nvd lookup. Product Version Release Advisory Product Release Spring Cloud Gateway for Kubernetes 2.2.17 Product Release Notes: https://techdocs.broadcom.com/ Security Fixes: This release has the following security fixes, listed by component. Component Vulnerabilities Resolved spring-cloud-gateway-for-kubernetes CVE-2026-46595 (Critical) CVE-2026-8763 (Critical) CVE-2026-75595 (Critical) CVE-2026-42508 (Critical) CVE-2026-39834 (Critical) CVE-2026-39833 (Critical) CVE-2026-39832 (Critical) CVE-2026-39831 (Critical) CVE-2026-39830 (Critical) CVE-2026-46597 (High) CVE-2026-42504 (High) CVE-2026-42501 (High) CVE-2026-42499 (High) CVE-2026-39836 (High) CVE-2026-39829 (High) CVE-2026-39820 (High) CVE-2026-33814 (High) CVE-2026-33811 (High) CVE-2026-27145 (High) CVE-2026-13506 (High) GO-2026-5038 (High) GO-2026-5037 (High) GO-2026-4986 (High) GO-2026-4981 (High) GO-2026-4977 (High) GO-2026-4971 (High) GO-2026-4918 (High) CVE-2026-75596 (Medium) CVE-2026-59903 (Medium) CVE-2026-59889 (Medium) CVE-2026-39827 (Medium) CVE-2026-25680 (Medium) CVE-2025-48924 (Medium) No known CVE - GHSA-mhm7-754m-9p8w (Medium) CVE-2026-49844 (Medium) CVE-2026-39828 (Medium) No known CVE - GHSA-mpwr-8vm7-h73f (Medium) CVE-2026-39826 (Medium) CVE-2026-39823 (Medium) GO-2026-5030 (Medium) GO-2026-5029 (Medium) GO-2026-5027 (Medium) GO-2026-5025 (Medium) GO-2026-4982 (Medium) GO-2026-4980 (Medium) CVE-2026-80489 (Medium) CVE-2026-77117 (Medium) CVE-2026-6791 (Medium) CVE-2026-6368 (Medium) CVE-2026-63076 (Medium) CVE-2026-63072 (Medium) CVE-2026-57433 (Medium) CVE-2026-57432 (Medium) CVE-2026-56412 (Medium) CVE-2026-56408 (Medium) CVE-2026-56405 (Medium) CVE-2026-56404 (Medium) CVE-2026-56403 (Medium) CVE-2026-54371 (Medium) CVE-2026-53910 (Medium) CVE-2026-53615 (Medium) CVE-2026-53613 (Medium) CVE-2026-27456 (Medium) CVE-2026-19542 (Medium) CVE-2026-19487 (Medium) CVE-2026-18938 (Medium) CVE-2026-15534 (Medium) CVE-2026-13757 (Medium) CVE-2026-13595 (Medium) CVE-2026-13221 (Medium) CVE-2026-12087 (Medium) CVE-2026-39817 (Medium) CVE-2026-77310 (Medium) CVE-2026-54515 (Medium) CVE-2026-46598 (Medium) CVE-2026-42507 (Medium) CVE-2026-39835 (Medium) CVE-2026-39825 (Medium) CVE-2026-39819 (Medium) GO-2026-5039 (Medium) GO-2026-4976 (Medium) GO-2026-5024 (Low) CVE-2026-75803 (Low) CVE-2026-63074 (Low) CVE-2026-54874 (Low) CVE-2026-42250 (Low) CVE-2025-6141 (Low) CVE-2025-5278 (Low) CVE-2024-2236 (Low) _____________________________________________________________________ Product Release Advisory - VMware Tanzu for Postgres on Kubernetes 4.5.2 Product/Component VMware Tanzu Data Intelligence VMware Tanzu Data Services VMware Tanzu Data Services Pack VMware Tanzu Data Services Solutions VMware Tanzu Data Suite VMware Tanzu for Postgres VMware Tanzu Platform Vmware Tanzu Platform - SM VMware Tanzu SQL Notification Id 39115 Last Updated 01 October 2026 Initial Publication Date 01 October 2026 Status CLOSED Severity CRITICAL CVSS Base Score 10 WorkAround N/A Affected CVE See CVE list in advisory Product Release Advisory - VMware Tanzu for Postgres on Kubernetes 4.5.2 Advisory ID TNZ-2026-0926 Tanzu Issue Date 2026-10-01 Updated on Highest Score CVE from list below advisory details Severity Critical CVSS V4 Vector Unavailable CVSS V4 Score Unavailable (Sev: Unavailable) CVSS V3.1 Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L CVSS V3.1 Score 10.0 (Sev: CRITICAL) CVSS V2 Vector Unavailable CVSS V2 Score Unavailable (Sev: Unavailable) Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability not having the vector or being GHSA or BDSA without a matching CVE for nvd lookup. Product Version Release Advisory Product Release VMware Tanzu for Postgres on Kubernetes 4.5.2 Product Release Notes: https://techdocs.broadcom.com/ Security Fixes: This release has the following security fixes, listed by component. Component Vulnerabilities Resolved tanzu-postgres-kubernetes CVE-2026-46595 (Critical) CVE-2025-68121 (Critical) GO-2026-4337 (Critical) CVE-2026-63073 (Critical) CVE-2026-33816 (Critical) CVE-2026-33815 (Critical) CVE-2026-27143 (Critical) CVE-2026-75803 (Critical) CVE-2026-42508 (Critical) CVE-2026-39834 (Critical) CVE-2026-39833 (Critical) CVE-2026-39832 (Critical) CVE-2026-39831 (Critical) CVE-2026-39830 (Critical) CVE-2026-34182 (Critical) CVE-2026-33186 (Critical) CVE-2025-22871 (Critical) CVE-2024-45337 (Critical) GO-2025-3563 (Critical) CVE-2026-27140 (Critical) CVE-2026-45447 (High) CVE-2026-33810 (High) CVE-2024-6345 (High) No known CVE - GHSA-hrxh-6v49-42gf (High) CVE-2026-84445 (High) CVE-2026-84304 (High) CVE-2026-63387 (High) CVE-2025-61732 (High) CVE-2025-61731 (High) CVE-2025-4674 (High) CVE-2026-6477 (High) CVE-2026-63388 (High) CVE-2026-56865 (High) CVE-2026-69247 (High) GO-2026-5026 (High) GO-2026-4866 (High) CVE-2026-8286 (High) CVE-2026-7383 (High) CVE-2026-8643 (High) CVE-2026-48864 (High) CVE-2026-39822 (High) CVE-2026-11824 (High) CVE-2026-11822 (High) GO-2026-4970 (High) CVE-2026-63385 (High) CVE-2026-63382 (High) CVE-2025-47273 (High) CVE-2026-9076 (High) CVE-2026-63384 (High) CVE-2026-63383 (High) CVE-2026-63076 (High) CVE-2026-63075 (High) CVE-2026-63072 (High) CVE-2026-59886 (High) CVE-2026-59885 (High) CVE-2026-59884 (High) CVE-2026-58016 (High) CVE-2026-56864 (High) CVE-2026-56862 (High) CVE-2026-56859 (High) CVE-2026-56853 (High) CVE-2026-54874 (High) CVE-2026-46600 (High) CVE-2026-46597 (High) CVE-2026-45445 (High) CVE-2026-42764 (High) CVE-2026-42504 (High) CVE-2026-42501 (High) CVE-2026-42499 (High) CVE-2026-41989 (High) CVE-2026-39836 (High) CVE-2026-39829 (High) CVE-2026-39820 (High) CVE-2026-34183 (High) CVE-2026-34180 (High) CVE-2026-33818 (High) CVE-2026-33814 (High) CVE-2026-33811 (High) CVE-2026-32283 (High) CVE-2026-32281 (High) CVE-2026-32280 (High) CVE-2026-29181 (High) CVE-2026-27145 (High) CVE-2026-27137 (High) CVE-2026-25679 (High) CVE-2026-18798 (High) CVE-2026-15308 (High) CVE-2026-14457 (High) CVE-2026-14456 (High) CVE-2026-14164 (High) CVE-2025-61729 (High) CVE-2025-61726 (High) CVE-2025-61725 (High) CVE-2025-61723 (High) CVE-2025-58188 (High) CVE-2025-58187 (High) CVE-2025-22874 (High) CVE-2025-22869 (High) CVE-2025-22868 (High) CVE-2022-40897 (High) GO-2026-6355 (High) GO-2026-6354 (High) GO-2026-6303 (High) GO-2026-6090 (High) GO-2026-6089 (High) GO-2026-6088 (High) GO-2026-5972 (High) GO-2026-5970 (High) GO-2026-5942 (High) GO-2026-5038 (High) GO-2026-5037 (High) GO-2026-4986 (High) GO-2026-4981 (High) GO-2026-4977 (High) GO-2026-4971 (High) GO-2026-4947 (High) GO-2026-4946 (High) GO-2026-4918 (High) GO-2026-4870 (High) GO-2026-4601 (High) GO-2026-4599 (High) GO-2026-4341 (High) GO-2025-4155 (High) GO-2025-4116 (High) GO-2025-4013 (High) GO-2025-4009 (High) GO-2025-4007 (High) GO-2025-4006 (High) GO-2025-3749 (High) CVE-2026-9547 (High) CVE-2026-34181 (High) CVE-2026-58014 (High) CVE-2026-39883 (High) CVE-2026-12912 (High) CVE-2026-54369 (High) CVE-2026-27144 (High) CVE-2026-16118 (High) CVE-2026-24051 (High) CVE-2025-47907 (High) GO-2025-3849 (High) CVE-2026-56132 (Medium) No known CVE - GHSA-w67g-5rqw-f597 (Medium) CVE-2026-1965 (Medium) CVE-2025-4673 (Medium) GO-2025-3751 (Medium) CVE-2026-63381 (Medium) CVE-2026-63379 (Medium) CVE-2026-6238 (Medium) CVE-2026-58013 (Medium) CVE-2026-58012 (Medium) CVE-2026-58011 (Medium) CVE-2026-58010 (Medium) CVE-2026-39827 (Medium) CVE-2026-25680 (Medium) CVE-2026-2303 (Medium) CVE-2025-61728 (Medium) CVE-2025-61727 (Medium) CVE-2025-47906 (Medium) GO-2026-4342 (Medium) GO-2025-4175 (Medium) GO-2025-3956 (Medium) CVE-2026-32282 (Medium) GO-2026-4864 (Medium) CVE-2026-84303 (Medium) CVE-2026-54371 (Medium) CVE-2026-54370 (Medium) CVE-2026-39828 (Medium) CVE-2026-13757 (Medium) CVE-2026-59890 (Medium) CVE-2026-56858 (Medium) CVE-2026-39826 (Medium) CVE-2026-39823 (Medium) CVE-2026-32289 (Medium) CVE-2026-27142 (Medium) CVE-2024-45341 (Medium) CVE-2024-45336 (Medium) GO-2026-6091 (Medium) GO-2026-5030 (Medium) GO-2026-5029 (Medium) GO-2026-5027 (Medium) GO-2026-5025 (Medium) GO-2026-4982 (Medium) GO-2026-4980 (Medium) GO-2026-4865 (Medium) GO-2026-4603 (Medium) GO-2025-3420 (Medium) GO-2025-3373 (Medium) CVE-2026-41991 (Medium) CVE-2026-6653 (Medium) CVE-2026-63074 (Medium) CVE-2026-58015 (Medium) CVE-2026-56860 (Medium) CVE-2026-5435 (Medium) CVE-2026-42767 (Medium) CVE-2026-42766 (Medium) CVE-2026-39817 (Medium) CVE-2026-27138 (Medium) CVE-2026-13221 (Medium) CVE-2025-8869 (Medium) GO-2026-6218 (Medium) GO-2026-4600 (Medium) CVE-2026-3783 (Medium) CVE-2026-32288 (Medium) CVE-2023-5752 (Medium) GO-2026-4869 (Medium) GO-2025-3750 (Medium) CVE-2026-58055 (Medium) CVE-2026-6357 (Medium) CVE-2026-46598 (Medium) CVE-2026-42769 (Medium) CVE-2026-42507 (Medium) CVE-2026-42505 (Medium) CVE-2026-39882 (Medium) CVE-2026-39835 (Medium) CVE-2026-39825 (Medium) CVE-2026-39819 (Medium) CVE-2026-32952 (Medium) CVE-2026-15588 (Medium) CVE-2025-61730 (Medium) CVE-2025-61724 (Medium) CVE-2025-58189 (Medium) CVE-2025-58186 (Medium) CVE-2025-58185 (Medium) CVE-2025-58181 (Medium) CVE-2025-47914 (Medium) CVE-2025-47912 (Medium) CVE-2025-22872 (Medium) CVE-2025-11065 (Medium) GO-2026-5856 (Medium) GO-2026-5039 (Medium) GO-2026-4976 (Medium) GO-2026-4441 (Medium) GO-2026-4440 (Medium) GO-2026-4340 (Medium) GO-2025-4015 (Medium) GO-2025-4012 (Medium) GO-2025-4011 (Medium) GO-2025-4010 (Medium) GO-2025-4008 (Medium) GO-2024-3333 (Medium) No known CVE - GHSA-fv92-fjc5-jj9h (Medium) CVE-2026-5928 (Medium) CVE-2026-5704 (Medium) CVE-2026-50219 (Medium) CVE-2026-45446 (Medium) CVE-2026-11979 (Medium) CVE-2026-3219 (Medium) CVE-2026-56392 (Medium) CVE-2026-18508 (Medium) CVE-2026-18477 (Medium) CVE-2025-22870 (Medium) GO-2025-3503 (Medium) CVE-2025-58183 (Medium) GO-2025-4014 (Medium) CVE-2025-22866 (Medium) GO-2025-3447 (Medium) CVE-2025-22873 (Low) GO-2026-4403 (Low) CVE-2026-42770 (Low) CVE-2026-42768 (Low) CVE-2026-41992 (Low) GO-2026-5024 (Low) CVE-2026-27139 (Low) CVE-2025-6170 (Low) GO-2026-4602 (Low) CVE-2026-41889 (Low) CVE-2026-81870 (Low) CVE-2026-1703 (Low) GO-2026-5841 (Unknown) _____________________________________________________________________ Product Release Advisory - VMware Spring Cloud Data Flow for Kubernetes 1.6.16 Product/Component App Suite Azure Spring Enterprise Pivotal Web Server Support Only for Apache HTTP Support Only for Apache Tomcat Tanzu Kubernetes Runtime VMware Tanzu Advanced VMware Tanzu Application Catalog VMware Tanzu Application Platform VMware Tanzu Application Service VMware Tanzu Data Intelligence VMware Tanzu Data Suite VMware Tanzu Kubernetes Grid Integrated Edition VMware Tanzu Platform VMware Tanzu Platform - Cloud Foundry VMware Tanzu Platform - Kubernetes VMware Tanzu Platform - SaaS Components Vmware Tanzu Platform - SM Notification Id 39108 Last Updated 01 October 2026 Initial Publication Date 01 October 2026 Status CLOSED Severity CRITICAL CVSS Base Score 9.8 WorkAround N/A Affected CVE See CVE list in advisory Product Release Advisory - VMware Spring Cloud Data Flow for Kubernetes 1.6.16 Advisory ID TNZ-2026-0919 Tanzu Issue Date 2026-10-01 Updated on Highest Score CVE from list below advisory details Severity Critical CVSS V4 Vector Unavailable CVSS V4 Score Unavailable (Sev: Unavailable) CVSS V3.1 Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS V3.1 Score 9.8 (Sev: CRITICAL) CVSS V2 Vector Unavailable CVSS V2 Score Unavailable (Sev: Unavailable) Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability not having the vector or being GHSA or BDSA without a matching CVE for nvd lookup. Product Version Release Advisory Product Release VMware Spring Cloud Data Flow for Kubernetes 1.6.16 Product Release Notes: https://techdocs.broadcom.com/ Security Fixes: This release has the following security fixes, listed by component. Component Vulnerabilities Resolved scs-dataflow-k8s CVE-2026-65905 (Critical) CVE-2026-65637 (Critical) CVE-2026-68525 (Critical) CVE-2026-65182 (Critical) CVE-2026-39821 (High) CVE-2026-56858 (High) CVE-2026-68569 (High) CVE-2026-66422 (High) CVE-2026-65183 (High) CVE-2026-91777 (High) CVE-2026-91776 (High) CVE-2026-68763 (High) CVE-2026-68497 (High) CVE-2026-65927 (High) CVE-2026-73180 (Medium) CVE-2026-56854 (Medium) CVE-2026-56865 (Medium) CVE-2026-56864 (Medium) CVE-2026-56862 (Medium) CVE-2026-56860 (Medium) CVE-2026-56859 (Medium) CVE-2026-56853 (Medium) CVE-2026-33818 (Medium) No known CVE - BDSA-2026-31551 (Medium) No known CVE - BDSA-2026-31550 (Medium) No known CVE - BDSA-2026-26434 (Medium) CVE-2026-83557 (Medium) CVE-2026-66299 (Medium) CVE-2026-19032 (Medium) CVE-2026-59084 (Low) ========================================================= + CERT-RENATER | tel : 01-53-94-20-44 + + 23/25 Rue Daviel | fax : 01-53-94-20-41 + + 75013 Paris | email:cert@support.renater.fr + =========================================================