CVE-2026-22754 | Vmware Spring Security up to 7.0.4 Authorization Rule authorization

A vulnerability described as problematic has been identified in Vmware Spring Security up to 7.0.4. Affected by this vulnerability is an unknown functionality of the component Authorization Rule Handler. The manipulation results in authorization bypass.

This vulnerability is identified as CVE-2026-22754. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.