VMware by Broadcom Spring Security (OAuth2 Authorization Server module)

• CVE-2026-59354 Critical 9.6 Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata 0.5%