Critical 2 vendors · 2 advisories

CVE-2026-40976

Unified cross-vendor view: this CVE is referenced by 2 tracked vendors. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

Linux1 advisory

Critical9.1Security bypass due to ineffective default web securityApr 27, 2026

VMware1 advisory

Critical9.1Spring Boot: In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpo…Apr 28, 2026