CVE-2026-59275

Published: Aug 27, 2026Modified: Sep 1, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier

Affected (4)

Products: Vmware: Spring Advanced Message Queuing Protocol

Vmware

1 product

Spring Advanced Message Queuing Protocol

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Vmware Spring Advanced Message Queuing Protocol	Before 2.4.19
Vmware Spring Advanced Message Queuing Protocol	From 3.2.0 to 3.2.13
Vmware Spring Advanced Message Queuing Protocol	From 4.0.0 to 4.0.4.1
Vmware Spring Advanced Message Queuing Protocol	From 4.1.0 to 4.1.0.1

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (1)

https://spring.io/security/cve-2026-59275

Source: security@vmware.com

Vendor Advisory

Timeline

No history available yet.