CVE-2026-40971 - Vulnerability Details

Frequency

occurrences

First Seen

April 27, 2026

Last Seen

April 27, 2026

CVE-2026-40971 is a vulnerability tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed April 27, 2026; most recent activity April 27, 2026.

Related Threat Clusters

Critical Vulnerabilities in Spring Boot's SSL Configuration for Elasticsearch and RabbitMQ
Two critical vulnerabilities have been identified in Spring Boot's auto-configuration for Elasticsearch and RabbitMQ. CVE-2026-40970 affects Elasticsearch, while CVE-2026-40971 impacts RabbitMQ. Both vulnerabilities…

2 articles · Updated April 27, 2026

Recent Intelligence Reports

CVE-2026-40971: RabbitMQ auto-configuration with an SSL bundle disables TLS hostname verification — spring.io · April 27, 2026

Related Entities

Zero-day Exploit Cwe-295 - Improper Certificate Validation Apache Tomcat OpenJDK RabbitMQ Spring Spring Boot

CVE-2026-40971 - Vulnerability Details

Entity Not Found

Related Threat Clusters

Recent Intelligence Reports

Related Entities

CVSS v3.1 Breakdown