CVE-2026-59276 | VMware Spring Security up to 7.1.0 String.equals timing discrepancy

A vulnerability has been found in VMware Spring Security up to 7.1.0 and classified as problematic. Impacted is the function String.equals. Performing a manipulation results in observable timing discrepancy.

This vulnerability is reported as CVE-2026-59276. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More