Product Release Advisory - VMware Tanzu Greenplum on Kubernetes 1.1.3

Product/Component

VMware Tanzu Data Intelligence

2 more products

Notification Id

38076

Last Updated

27 July 2026

Initial Publication Date

27 July 2026

Status

CLOSED

Severity

HIGH

CVSS Base Score

WorkAround

Affected CVE

	Highest Score CVE from list below advisory details
Severity	High
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS V3.1 Score	9.1 (Sev: CRITICAL)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes: This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
gp-command-center	CVE-2026-42496 (High) CVE-2026-48962 (High) CVE-2026-48864 (High) CVE-2026-15308 (High) CVE-2025-13151 (Medium) CVE-2024-34459 (Medium) CVE-2026-5450 (Medium) CVE-2025-5278 (Medium) CVE-2025-6170 (Low)
gp-operator	GO-2026-4970 (High) CVE-2026-39822 (High) GO-2026-5856 (Medium) CVE-2026-42505 (Medium) GO-2026-5970 (Low) GO-2026-5942 (Low)