com.atomikos:transactions-spring-boot4-integration-tests (6.0.1), com.devskiller.friendly-id:friendly-id-openfeign (>=2.0.0-alpha3, <=2.0.0-beta6) +9 more potentially affected by CVE-2026-41001 via org.springframework.boot:spring-boot-artemis (>=4.0.0-m1, <=4.0.6)

org.springframework.boot:spring-boot-artemis MAVEN version =4.0.0-m1, =2.0.0-alpha3, =4.0.0-m2, =4.0.0-m2, =4.0.0-m1, =4.0.0-rc1, =4.0.0-m2, =4.0.6 - se.swedenconnect.bankid:bankid-idp 1.3.0 Source cves: CVE-2026-41001 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBOOT-18324165...

PT-2026-48526

Name of the Vulnerable Software and Affected Versions dracut affected versions not specified Description A flaw in the legacy DHCP path allows a remote attacker on the adjacent network to achieve root code execution within the initramfs initial RAM file system, which is loaded with the kernel at...

Improper Validation of Certificate with Host Mismatch

Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch via missing hostname verification in the auto-configuration. An attacker can impersonate a trusted mail server and intercept or manipulate SMTP communications because hostname...

cve-2026-40992 - MEDIUM - Mail Auto-Configuration Does Not Enable SSL Hostname Verification

cve-2026-40992 - MEDIUM - Mail Auto-Configuration Does Not Enable SSL Hostname Verification...

io.github.shuigedeng:taotao-boot-demo (>=2025.02, <=2025.11), io.github.shuigedeng:taotao-boot-starter-mq-pulsar (>=2025.02, <=2025.11) +7 more potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar (>=1.2.0, <=1.2.17)

org.springframework.pulsar:spring-pulsar MAVEN version =1.2.0, =2025.02, =2025.02, =2025.02, =2025.02, =3.4.0, =3.4.0, =4.2.2, =1.2.0, =1.2.0, =1.2.17 Source cves: CVE-2026-41732 Source advisory: MEND:CVE-2026-41732...

org.springframework.boot:spring-boot-starter-pulsar (>=3.3.0, <=3.3.13), org.springframework.boot:spring-boot-starter-pulsar-reactive (>=3.3.0, <=3.3.13) +3 more potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar (>=1.1.0, <=1.1.13)

org.springframework.pulsar:spring-pulsar MAVEN version =1.1.0, =3.3.0, =3.3.0, =1.1.0, =1.1.0, =1.1.13 Source cves: CVE-2026-41732 Source advisory: MEND:CVE-2026-41732...

io.github.shuigedeng:taotao-boot-demo (2025.12), io.github.shuigedeng:taotao-boot-starter-mq-pulsar (>=2025.12, <=2026.06) +23 more potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar (>=2.0.0, <=2.0.5)

org.springframework.pulsar:spring-pulsar MAVEN version =2.0.0, =2025.12, =2025.12, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.4.0, =1.0.0, =1.0.0, =1.0.2, =1.0.2, =1.4.5 and more Source cves: CVE-2026-41732 Source advisory: MEND:CVE-2026-41732...

io.github.shuigedeng:taotao-boot-demo (>=2025.02, <=2025.11), io.github.shuigedeng:taotao-boot-starter-mq-pulsar (>=2025.02, <=2025.11) +3 more potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar-reactive (>=1.2.0, <=1.2.17)

org.springframework.pulsar:spring-pulsar-reactive MAVEN version =1.2.0, =2025.02, =2025.02, =2025.02, =2025.02, =3.4.0, =3.5.14 Source cves: CVE-2026-41732 Source advisory: MEND:CVE-2026-41732...

org.springframework.boot:spring-boot-starter-pulsar-reactive (>=3.3.0, <=3.3.13) potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar-reactive (>=1.1.0, <=1.1.13)

org.springframework.pulsar:spring-pulsar-reactive MAVEN version =1.1.0, =3.3.0, =3.3.13 Source cves: CVE-2026-41732 Source advisory: MEND:CVE-2026-41732...

cn.airfei.air-core:core (>=3.0.0, <=3.0.4), cn.allbs:allbs-bom (>=1.1.6, <=2.0.0) +304 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=3.4.0, <=3.4.18)

org.springframework.data:spring-data-mongodb MAVEN version =3.4.0, =3.0.0, =1.1.6, =1.1.6, =0.0.1, =0.0.5, =1.2.3, =1.2.3, =1.2.3, =1.2.3, =1.2.3, =1.2.3, =1.2.3, =1.2.3, =1.3.0 - cn.bootx.platform:service-office 1.2.3 - cn.bootx.platform:service-visualization 1.2.3 and more Source cves:...

com.epages:restdocs-api-spec-restassured (>=0.11.2, <=0.16.4), org.springframework.boot:spring-boot-docs (>=2.0.0.release, <=2.1.18.release) +1 more potentially affected by CVE-2026-40991 via org.springframework.restdocs:spring-restdocs-restassured (>=2.0.0.release, <=2.0.5.release)

org.springframework.restdocs:spring-restdocs-restassured MAVEN version =2.0.0.release, =0.11.2, =2.0.0.release, =2.0.0, =2.2.1 Source cves: CVE-2026-40991 Source advisory: MEND:CVE-2026-40991...

com.epages:restdocs-api-spec (>=0.20.0, <=0.20.2), com.epages:restdocs-api-spec-mockmvc (>=0.20.0, <=0.20.2) +11 more potentially affected by CVE-2026-40991 via org.springframework.restdocs:spring-restdocs-core (4.0.0)

org.springframework.restdocs:spring-restdocs-core MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.restdocs:spring-restdocs-core and may be impacted: - com.epages:restdocs-api-spec =0.20.0, =0.20.0, =0.20.0, =4.0....

EUVD-2026-35521

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35526

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35525

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35523

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35522

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35524

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35514

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

CVE-2026-8863

Multiple Microsoft-signed UEFI SHIM bootloaders are vulnerable to a SecureBoot bypass . An attacker with administrative privileges or the ability to modify the boot process can exploit these vulnerable bootloaders to execute arbitrary code before the operating system loads. To remediate this, a s...