CVE-2026-40972 - Vulnerability Details

Frequency

occurrences

First Seen

April 27, 2026

Last Seen

April 28, 2026

CVE-2026-40972 is a vulnerability tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed April 27, 2026; most recent activity April 28, 2026.

Related Threat Clusters

Multiple CVEs Affecting Spring Framework Released on April 27, 2026
On April 27, 2026, three critical vulnerabilities were disclosed for the Spring Framework. CVE-2026-40973 allows local attackers to hijack sessions by exploiting predictable temp directory permissions. CVE-2026-40972…

4 articles · Updated April 27, 2026

Recent Intelligence Reports

Warning: Multiple vulnerabilities in Spring Boot. Patch Immediately! — Ccb.Belgium.Be · April 28, 2026
CVE-2026-40972: DevTools remote secret comparison is vulnerable to timing attacks — spring.io · April 27, 2026

Related Entities

Data Breach Zero-day Exploit CVE-2026-40973 CVE-2026-40976 CWE-200 - Exposure of Sensitive Information CWE-287 - Improper Authentication T1190 - Exploit Public-Facing Application Spring Boot

CVE-2026-40972 - Vulnerability Details

Entity Not Found

Related Threat Clusters

Recent Intelligence Reports

Related Entities

CVSS v3.1 Breakdown