Skip to content

CVE-2026-40970

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
April 27, 2026
Last Seen
April 27, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Two critical vulnerabilities have been identified in Spring Boot's auto-configuration for Elasticsearch and RabbitMQ. CVE-2026-40970 affects Elasticsearch, while CVE-2026-40971 impacts RabbitMQ. Both vulnerabilities occur when configured to use an SSL bundle, leading to the disabling of TLS hostname...

Public Exploits

Checking GitHub for proof-of-concept code…