CVE-2026-47862 | VMware Spring Integration up to 6.4.12/6.5.10/7.0.5/7.1.0 ZipTransformer file_name path traversal

A vulnerability was found in VMware Spring Integration up to 6.4.12/6.5.10/7.0.5/7.1.0 and classified as critical. The affected element is an unknown function of the component ZipTransformer. Such manipulation of the argument file_name leads to path traversal.

This vulnerability is referenced as CVE-2026-47862. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More