High 1 vendor · 1 advisory

CVE-2026-41007

Unified cross-vendor view: this CVE is referenced by 1 tracked vendor. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

VMware1 advisory

High7.5Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker-supplied strings.Jun 9, 2026

CVE-2026-41007 — high severity, 1 vendor affected · VulniPulse