VDB
CVE-2026-41712
CVE-2026-41712
PUBLISHED
On May 8, 2026, Spring published security advisories to address vulnerabilities in the following products: Spring AI – 1.0.x versions prior to 1.0.7 Spring AI – 1.1.x versions prior to 1.1.6 The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.
EPSS 0.26% · 17.6th percentile
Risk Scores
EPSS Score
0.26%
17.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| VMware | Spring AI – 1.1.x versions prior to 1.1.6 | |
| VMware | Spring AI – 1.0.x versions prior to 1.0.7 |
Timeline
- May 11, 2026 CVE Published
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 20, 2026 Security Advisory
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score
- May 27, 2026 EPSS Score