Secure Boot Data Compromise

The vulnerability of the Secure Boot component in Linux operating systems is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-40970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch...

CVE-2026-40970

A flaw was found in Spring Boot. When configured to use an SSL Secure Sockets Layer bundle, the Elasticsearch auto-configuration component does not perform hostname verification when establishing a connection to the Elasticsearch server. An attacker on an adjacent network could exploit this by...

Linux kernel double free in Xen privcmd driver

ISSUE DESCRIPTION The Linux kernel's privcmd driver can be abused to circumvent kernel lockdown secure boot by causing a double free of kernel memory. Note that this operation can be performed by root only, so any further impact on the system like denial of service is not security relevant. IMPAC...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell Security Lab — nginx + Coraza WAF Mục đích giáo...

com.devskiller.friendly-id:friendly-id-openfeign (>=2.0.0-alpha3, <=2.0.0-beta6), io.github.bluetape4k:bluetape4k-spring-boot4-cassandra (>=1.5.0-beta2, <=1.7.0) +19 more potentially affected by CVE-2026-40977 via org.springframework.boot:spring-boot-cassandra (>=4.0.0, <=4.0.5)

org.springframework.boot:spring-boot-cassandra MAVEN version =4.0.0, =2.0.0-alpha3, =1.5.0-beta2, =0.8.0, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0...

com.devskiller.friendly-id:friendly-id-openfeign (>=2.0.0-alpha3, <=2.0.0-beta6), io.github.bluetape4k:bluetape4k-spring-boot4-cassandra (>=1.5.0-beta2, <=1.7.0) +19 more potentially affected by CVE-2026-40975 via org.springframework.boot:spring-boot-cassandra (>=4.0.0, <=4.0.5)

org.springframework.boot:spring-boot-cassandra MAVEN version =4.0.0, =2.0.0-alpha3, =1.5.0-beta2, =0.8.0, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0...

com.devskiller.friendly-id:friendly-id-openfeign (>=2.0.0-alpha3, <=2.0.0-beta6), io.github.bluetape4k:bluetape4k-spring-boot4-cassandra (>=1.5.0-beta2, <=1.7.0) +19 more potentially affected by CVE-2026-40977 via org.springframework.boot:spring-boot-cassandra (>=4.0.0, <=4.0.5)

org.springframework.boot:spring-boot-cassandra MAVEN version =4.0.0, =2.0.0-alpha3, =1.5.0-beta2, =0.8.0, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0...

com.devskiller.friendly-id:friendly-id-openfeign (>=2.0.0-alpha3, <=2.0.0-beta6), io.github.bluetape4k:bluetape4k-spring-boot4-cassandra (>=1.5.0-beta2, <=1.7.0) +19 more potentially affected by CVE-2026-40975 via org.springframework.boot:spring-boot-cassandra (>=4.0.0, <=4.0.5)

org.springframework.boot:spring-boot-cassandra MAVEN version =4.0.0, =2.0.0-alpha3, =1.5.0-beta2, =0.8.0, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0...

com.github.attt:archer-spring-autoconfigure (1.0-rc1), com.github.attt:archer-spring-boot-starter (1.0-rc1) +23 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.0.0.release)

org.springframework.boot:spring-boot MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.attt:archer-spring-autoconfigure 1.0-rc1 -...

com.ebay:lightning-client (0.9.0), com.ebay:lightning-core (0.9.0) +25 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.0.1.release)

org.springframework.boot:spring-boot MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.ebay:lightning-client 0.9.0 - com.ebay:lightning-core 0.9.0 -...

com.blitline:blitline-image-client-example (>=0.10.1, <=0.13.3), com.erudika:para (>=1.3.0, <=1.7.0) +37 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.0.2.release)

org.springframework.boot:spring-boot MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.blitline:blitline-image-client-example =0.10.1, =1.3.0, =1.1.0.beta5,...

org.springframework.boot:spring-boot-actuator (1.1.0.release), org.springframework.boot:spring-boot-autoconfigure (1.1.0.release) +29 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.0.release)

org.springframework.boot:spring-boot MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - org.springframework.boot:spring-boot-actuator 1.1.0.release -...

io.fabric8:process-spring-boot-container (1.1.0.cr2), io.fabric8:process-spring-boot-itests-invoicing (1.1.0.cr2) +40 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.1.release)

org.springframework.boot:spring-boot MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - io.fabric8:process-spring-boot-container 1.1.0.cr2 -...

org.springframework.boot:spring-boot-actuator (1.1.2.release), org.springframework.boot:spring-boot-autoconfigure (1.1.2.release) +28 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.2.release)

org.springframework.boot:spring-boot MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - org.springframework.boot:spring-boot-actuator 1.1.2.release -...

com.github.cafdataprocessing:boilerplate-api-web (>=2.0.0-5, <=2.3.0-92), com.github.cafdataprocessing:corepolicy-web (>=1.0.0-4, <=1.2.0-165) +36 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.3.release)

org.springframework.boot:spring-boot MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.cafdataprocessing:boilerplate-api-web =2.0.0-5, =1.0.0-4, =1.1.0.cr3...

com.erudika:para (1.8.0), com.github.totyumengr:minicubes-cluster (0.2) +55 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.4.release)

org.springframework.boot:spring-boot MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.erudika:para 1.8.0 - com.github.totyumengr:minicubes-cluster 0.2 -...

com.github.kmbulebu.nicknack:nicknack-server (0.0.4), com.github.relai.vertx.springdata:mod-spring-data (0.5) +44 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.5.release)

org.springframework.boot:spring-boot MAVEN version 1.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.kmbulebu.nicknack:nicknack-server 0.0.4 -...

com.bytebybyte:google-geocoding (>=3.0.0, <=3.0.1), com.bytebybyte:mapquest-open-geocoding (1.0.0) +60 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.6.release)

org.springframework.boot:spring-boot MAVEN version 1.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.bytebybyte:google-geocoding =3.0.0, =0.7, =0.8.0 -...

com.vilt-group.minium:minium-app (0.9.6), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +36 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.7.release)

org.springframework.boot:spring-boot MAVEN version 1.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.vilt-group.minium:minium-app 0.9.6 - de.codecentric:jbehave-admin-server...