Changeflow GovPing Data Privacy & Cybersecurity VMware Product Vulnerabilities Identified by CE...
Priority review Notice Added Final

VMware Product Vulnerabilities Identified by CERT-FR

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published March 19th, 2026
Detected March 19th, 2026
Email

Summary

CERT-FR has issued an advisory regarding multiple vulnerabilities discovered in various VMware products. These vulnerabilities could allow an attacker to cause unspecified security issues. Affected users are advised to consult VMware's security bulletins for patch information.

View original document View source feed page

What changed

CERT-FR, the French national cybersecurity agency, has published an advisory (CERTFR-2026-AVI-0316) detailing multiple vulnerabilities affecting several VMware products, including specific versions of Foundation Core for Tanzu Platform, HWC Buildpack, Java Buildpack, NGINX Buildpack, NodeJS Buildpack, and Tanzu for MySQL on Tanzu Platform. The advisory notes that these vulnerabilities could enable an attacker to exploit unspecified security flaws, although the specific risk level was not detailed by the vendor.

Organizations utilizing the affected VMware products are strongly urged to review the referenced VMware security bulletins (e.g., Bulletin 37211 through 37222) and apply the necessary patches and updates as soon as possible to mitigate potential security risks. Failure to address these vulnerabilities could lead to system compromise or data breaches.

What to do next

  1. Review VMware security bulletins for affected products.
  2. Apply available patches and updates to mitigate identified vulnerabilities.

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 19 mars 2026 N° CERTFR-2026-AVI-0316 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans les produits VMware

Gestion du document

| Référence | CERTFR-2026-AVI-0316 |
| Titre | Multiples vulnérabilités dans les produits VMware |
| Date de la première version | 19 mars 2026 |
| Date de la dernière version | 19 mars 2026 |
| Source(s) | Bulletin de sécurité VMware 37211 du 18 mars 2026
Bulletin de sécurité VMware 37212 du 18 mars 2026
Bulletin de sécurité VMware 37213 du 18 mars 2026
Bulletin de sécurité VMware 37214 du 18 mars 2026
Bulletin de sécurité VMware 37215 du 18 mars 2026
Bulletin de sécurité VMware 37216 du 18 mars 2026
Bulletin de sécurité VMware 37217 du 18 mars 2026
Bulletin de sécurité VMware 37218 du 18 mars 2026
Bulletin de sécurité VMware 37219 du 18 mars 2026
Bulletin de sécurité VMware 37220 du 18 mars 2026
Bulletin de sécurité VMware 37221 du 18 mars 2026
Bulletin de sécurité VMware 37222 du 18 mars 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risque

  • Non spécifié par l'éditeur

Systèmes affectés

  • Foundation Core for VMware Tanzu Platform versions antérieures à 3.1.9
  • HWC Buildpack versions antérieures à 3.1.91
  • Java Buildpack versions antérieures à 4.90.0
  • NGINX Buildpack versions antérieures à 1.2.71
  • NodeJS Buildpack versions antérieures à 1.8.82
  • Tanzu for MySQL sur Tanzu Platform versions antérieures à 10.1.1

Résumé

De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 19 mars 2026 Version initiale

Named provisions

Risque Systèmes affectés Résumé Solutions Documentation

Related changes

Favicon for www.cert.ssi.gouv.fr CERT-FR Advises on Splunk Universal Forwarder Vulnerabilities
Priority review Mar 19, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Mitel Products Vulnerability - XSS
Priority review Mar 19, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Python Vulnerability Allows Security Policy Bypass
Priority review Mar 19, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.justice.gov DOJ Seizes Four Domains Used in Iranian Cyber Operations
Urgent Mar 20, 2026 • DOJ News • Courts & Legal
Favicon for www.cisa.gov CISA ICS Advisory: WebCTRL Server Vulnerabilities Allow Communication Interception
Priority review Mar 19, 2026 • CISA ICS-CERT Advisories • Data Privacy & Cybersecurity
Favicon for www.cisa.gov CISA: IGL-Technologies eParking.fi ICS Advisory
Urgent Mar 19, 2026 • CISA ICS-CERT Advisories • Data Privacy & Cybersecurity

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity
Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
CERT-FR
Published
March 19th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0316

Who this affects

Applies to
Technology companies
Industry sector
5112 Software & Technology
Activity scope
Vulnerability Management System Patching
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Topics
IT Security Vulnerability Management

Browse Categories

Agriculture & Food Safety 61 Banking & Finance 211 Consumer Protection 35 Courts & Legal 245 Data Privacy & Cybersecurity 59 Defense & National Security 48 Education 20 Energy 101 Energy & Utilities 1 Environment 82 Government & Legislation 240 Healthcare 116 Housing 15 Immigration 8 Insurance 56 Labor & Employment 110 Pharma & Drug Safety 77 Securities & Markets 73 Tax 49 Telecom & Technology 34 Trade & Sanctions 122 Transportation 56

Get Data Privacy & Cybersecurity alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.