High 2 vendors · 2 advisories

CVE-2026-40975

Unified cross-vendor view: this CVE is referenced by 2 tracked vendors. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

Linux1 advisory

High8.2Weak pseudo-random number generation can lead to information disclosure.Apr 27, 2026

VMware1 advisory

Medium4.8Spring Boot: Values produced by ${random.value} are not suitable for use as secrets.Apr 28, 2026

CVE-2026-40975 — high severity, 2 vendors affected · VulniPulse