CVE-2026-22718

6.8 mediumEPSS 0.6%

Medium (6.8). EPSS 0.6% chance of exploitation in the next 30 days.

The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine.

Severity

6.8 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2026-01-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19