# VMware Tanzu Greenplum multiple vulnerabilities

Published: 2026-08-10 · Severity: elevated
Canonical: https://vorant.io/reports/d57d202a-6bbc-5fa9-b30c-06a49ff9e745/vmware-tanzu-greenplum-multiple-vulnerabilities

> Multiple unspecified vulnerabilities in Tanzu Greenplum Platform Extension Framework versions before 8.0.3 require patching.

VMware has published a security advisory addressing multiple vulnerabilities in Tanzu Greenplum Platform Extension Framework. The advisory identifies 15 CVEs affecting versions prior to 8.0.3, with details limited by the vendor to non-specific security issues. The vulnerabilities span legacy CVE identifiers (CVE-2018-11798, CVE-2019-0205, CVE-2020-13949) and newer ones assigned in 2026. Defenders running Tanzu Greenplum should prioritize upgrading to version 8.0.3 or later as specified in VMware's security bulletin. The lack of detailed impact descriptions from the vendor limits the ability to assess which vulnerabilities pose the most immediate risk, necessitating a precautionary approach to patching.

## Mentioned in this report

- Vulnerabilities: CVE-2018-11798, CVE-2019-0205, CVE-2020-13949, CVE-2026-43869, CVE-2026-45205, CVE-2026-54291, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, CVE-2026-59921

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/d57d202a-6bbc-5fa9-b30c-06a49ff9e745/vmware-tanzu-greenplum-multiple-vulnerabilities.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup