K000162213: Spring Cloud vulnerability CVE-2026-40982

Security Advisory Description Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack. Spring Cloud...

CVE-2026-40982

A flaw was found in Spring Cloud Config. A remote attacker can exploit a directory traversal vulnerability by sending a specially crafted URL to the spring-cloud-config-server module. This allows the attacker to access arbitrary text and binary files on the system. Mitigation Mitigation for this...

CVE-2026-40982

creationtimestamp| type| source ---|---|--- 2026-05-07 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116531411462780607 2026-05-07 04:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlaeyqh2um2y 2026-05-07 05:25:46+00:00| seen|...

CVE-2026-40982

Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack. Spring Cloud Config 3.1.x: affected from...

EUVD-2023-40982

Malicious code in bioql PyPI...

MAL-2025-40982 Malicious code in ziggurat-car-sgp9 (npm)

The package ziggurat-car-sgp9 was found to contain malicious code...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-40982)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-40982 advisory. - In the Linux kernel, the following vulnerability has been resolved: ssb: Fix potential NULL pointer...

CVE-2024-40982

...

CVE-2024-40982 affecting package kernel for versions less than 5.15.176.3-2

CVE-2024-40982 affecting package kernel for versions less than 5.15.176.3-2. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2024-40982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ssb: Fix potential NULL pointer dereference in ssbdeviceuevent The ssbdeviceuevent function...

Linux Distros Unpatched Vulnerability : CVE-2022-40982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information exposure through microarchitectural state after transient execution in certain vector execution units for some IntelR Processors may allow an...

SUSE: Security Advisory (SUSE-SU-2023:3391-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-40982

A flaw was found in the ssb module in the Linux kernel. A NULL pointer dereference can be triggered due to a missing input validation when converting a device to a SSB device, resulting in a denial of service...

CVE-2024-40982

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-40982

CVE-2024-40982 affects the Linux kernel in the ssb_device_uevent() path where a NULL pointer could be dereferenced before a NULL check. The fix moves the NULL check before dereferencing, mitigating the issue. In Mariner 2.0, kernels older than 5.15.176.3-2 are affected; upgrading to 5.15.176.3-2 ...

CVE-2024-40982

Removed by vendor...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2024-1443)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. 'Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

RHEL 9 : kernel-rt (RHSA-2024:1306)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1306 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...