Skip to content

CVE-2026-40970

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
April 27, 2026
Last Seen
April 27, 2026
API
Exploited in Wild
Ransomware Use
Public Exploits
Attack Vector

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Two critical vulnerabilities have been identified in Spring Boot's auto-configuration for Elasticsearch and RabbitMQ. CVE-2026-40970 affects Elasticsearch, while CVE-2026-40971 impacts RabbitMQ. Both vulnerabilities occur when configured to use an SSL bundle, leading to the disabling of TLS hostname...

Public Exploits

Checking GitHub for proof-of-concept code…