Critical 3 vendors · 3 advisories

CVE-2026-40976

CVE-2026-40976: critical-severity vulnerability covered by 3 tracked advisory records across NetApp, Red Hat, VMware. Compare affected products, fixed…

NVD detail CVE.org

Android app · Google Play

Turn CVE research into alerts on your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

NetApp1 advisory

Critical9.1Critical [CVE-2026-40976] Spring Boot Vulnerability in NetApp ProductsAug 21, 2026

Red Hat1 advisory

Critical9.1Critical [CVE-2026-40976] Security bypass due to ineffective default web securityApr 27, 2026

VMware1 advisory

Critical9.1Critical [CVE-2026-40976] In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpointsApr 28, 2026