A vulnerability labeled as problematic has been found in Vmware Spring Web Services up to 3.1.8/4.0.18/4.1.3/5.0.1 . This issue affects some unknown processing. Such manipulation leads to authentication bypass by capture-replay. This vulnerability is uniquely identified as CVE-2026-41000 . The attack can be launched remotely. No exploit exists. The affected component should be upgraded.