01 Record

CVE-2026-59296

Micrometer StatsD and Logging meter registries line-protocol and log injection vulnerability

MediumPUBLISHEDCNA: vmware

Base score5.9 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

02 Description

Micrometer StatsD and Logging meter registries line-protocol and log injection vulnerability

Published

2026-08-21 10:47Z14 HR AGO

Last updated

2026-08-21 16:44Z8 HR AGO

Reserved

2026-07-04

Assigning CNA

vmware

Record state

PUBLISHED

Severity

Medium (CVSS 5.9)

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses

CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Class

SSVC decision

ExploitationnoneAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

9809c65fe57a4a6c833cb8d9536d191bb1a56335b0df2d48cecf4927356b1ef8

VendorProductVersionsPlatforms

VMwareSpring Micrometer1.17.0 - 1.17.0, 1.16.0 - 1.16.6, 1.15.0 - 1.15.12, 1.14.0 - 1.14.16, 1.9.18 and earlier—