CVE-2026-22748 | Vmware Spring Security up to 6.3.14/6.4.14/6.5.9/7.0.4 JWT Decoding NimbusJwtDecoder/NimbusReactiveJwtDecoder

A vulnerability, which was classified as problematic, has been found in Vmware Spring Security up to 6.3.14/6.4.14/6.5.9/7.0.4. This vulnerability affects the function NimbusJwtDecoder/NimbusReactiveJwtDecoder of the component JWT Decoding. Performing a manipulation results in an unknown weakness.

This vulnerability is cataloged as CVE-2026-22748. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.