Improper Control Of Temporary Directory Access

🗓️ 29 Apr 2026 10:18:09Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 13 Views

Improper control of ApplicationTemp in Spring Boot lets local attackers access session data.

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by Multiple Vulnerabilities.	15 Jun 202619:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in spring-boot (CVE-2026-40973, CVE-2026-40975, CVE-2026-40977)	27 May 202614:04	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Link Resolution Before File Access ('Link Following'), Use of Insufficiently Random Values, Insecure Temporary File (CVE-2026-40977, CVE-2026-40975, CVE-2026-40973)	15 Jun 202620:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for May 2026 - Multiple CVEs addressed	9 Jul 202607:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Spring Boot	26 Jun 202620:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	24 May 202615:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	28 May 202613:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	24 May 202615:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	24 May 202615:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for May 2026	12 Jun 202622:52	–	ibm

Vulners

Node

spring spring-bootRange4.0.0-M1–4.0.5java

spring spring-bootRange0.5.0.M1–3.5.13java

spring spring-bootMatch4.0.0java

spring spring-bootMatch4.0.1java

spring spring-bootMatch4.0.2java

spring spring-bootMatch4.0.3java

spring spring-bootMatch4.0.4java

spring spring-bootMatch3.5.0java

spring spring-bootMatch3.5.1java

spring spring-bootMatch3.5.10java

spring spring-bootMatch3.5.11java

spring spring-bootMatch3.5.12java

spring spring-bootMatch3.5.2java

spring spring-bootMatch3.5.3java

spring spring-bootMatch3.5.4java

spring spring-bootMatch3.5.5java

spring spring-bootMatch3.5.6java

spring spring-bootMatch3.5.7java

spring spring-bootMatch3.5.8java

spring spring-bootMatch3.5.9java

spring spring-bootMatch3.4.0java

spring spring-bootMatch3.4.1java

spring spring-bootMatch3.4.10java

spring spring-bootMatch3.4.11java

spring spring-bootMatch3.4.12java

spring spring-bootMatch3.4.13java

spring spring-bootMatch3.4.2java

spring spring-bootMatch3.4.3java

spring spring-bootMatch3.4.4java

spring spring-bootMatch3.4.5java

spring spring-bootMatch3.4.6java

spring spring-bootMatch3.4.7java

spring spring-bootMatch3.4.8java

spring spring-bootMatch3.4.9java

spring spring-bootMatch3.3.0java

spring spring-bootMatch3.3.1java

spring spring-bootMatch3.3.10java

spring spring-bootMatch3.3.11java

spring spring-bootMatch3.3.12java

spring spring-bootMatch3.3.13java

spring spring-bootMatch3.3.2java

spring spring-bootMatch3.3.3java

spring spring-bootMatch3.3.4java

spring spring-bootMatch3.3.5java

spring spring-bootMatch3.3.6java

spring spring-bootMatch3.3.7java

spring spring-bootMatch3.3.8java

spring spring-bootMatch3.3.9java

spring spring-bootMatch1.0.0.releasejava

spring spring-bootMatch1.0.1.releasejava

spring spring-bootMatch1.0.2.releasejava

spring spring-bootMatch1.1.0.releasejava

spring spring-bootMatch1.1.1.releasejava

spring spring-bootMatch1.1.10.releasejava

spring spring-bootMatch1.1.11.releasejava

spring spring-bootMatch1.1.12.releasejava

spring spring-bootMatch1.1.2.releasejava

spring spring-bootMatch1.1.3.releasejava

spring spring-bootMatch1.1.4.releasejava

spring spring-bootMatch1.1.5.releasejava

spring spring-bootMatch1.1.6.releasejava

spring spring-bootMatch1.1.7.releasejava

spring spring-bootMatch1.1.8.releasejava

spring spring-bootMatch1.1.9.releasejava

spring spring-bootMatch1.2.0.releasejava

spring spring-bootMatch1.2.1.releasejava

spring spring-bootMatch1.2.2.releasejava

spring spring-bootMatch1.2.3.releasejava

spring spring-bootMatch1.2.4.releasejava

spring spring-bootMatch1.2.5.releasejava

spring spring-bootMatch1.2.6.releasejava

spring spring-bootMatch1.2.7.releasejava

spring spring-bootMatch1.2.8.releasejava

spring spring-bootMatch1.3.0.releasejava

spring spring-bootMatch1.3.1.releasejava

spring spring-bootMatch1.3.2.releasejava

spring spring-bootMatch1.3.3.releasejava

spring spring-bootMatch1.3.4.releasejava

spring spring-bootMatch1.3.5.releasejava

spring spring-bootMatch1.3.6.releasejava

spring spring-bootMatch1.3.7.releasejava

spring spring-bootMatch1.3.8.releasejava

spring spring-bootMatch1.4.0.releasejava

spring spring-bootMatch1.4.1.releasejava

spring spring-bootMatch1.4.2.releasejava

spring spring-bootMatch1.4.3.releasejava

spring spring-bootMatch1.4.4.releasejava

spring spring-bootMatch1.4.5.releasejava

spring spring-bootMatch1.4.6.releasejava

spring spring-bootMatch1.4.7.releasejava

spring spring-bootMatch1.5.0.releasejava

spring spring-bootMatch1.5.1.releasejava

spring spring-bootMatch1.5.10.releasejava

spring spring-bootMatch1.5.11.releasejava

spring spring-bootMatch1.5.12.releasejava

spring spring-bootMatch1.5.13.releasejava

spring spring-bootMatch1.5.14.releasejava

spring spring-bootMatch1.5.15.releasejava

spring spring-bootMatch1.5.16.releasejava

spring spring-bootMatch1.5.17.releasejava

spring spring-bootMatch1.5.18.releasejava

spring spring-bootMatch1.5.19.releasejava

spring spring-bootMatch1.5.2.releasejava

spring spring-bootMatch1.5.20.releasejava

spring spring-bootMatch1.5.21.releasejava

spring spring-bootMatch1.5.22.releasejava

spring spring-bootMatch1.5.3.releasejava

spring spring-bootMatch1.5.4.releasejava

spring spring-bootMatch1.5.5.releasejava

spring spring-bootMatch1.5.6.releasejava

spring spring-bootMatch1.5.7.releasejava

spring spring-bootMatch1.5.8.releasejava

spring spring-bootMatch1.5.9.releasejava

spring spring-bootMatch2.0.0.releasejava

spring spring-bootMatch2.0.1.releasejava

spring spring-bootMatch2.0.2.releasejava

spring spring-bootMatch2.0.3.releasejava

spring spring-bootMatch2.0.4.releasejava

spring spring-bootMatch2.0.5.releasejava

spring spring-bootMatch2.0.6.releasejava

spring spring-bootMatch2.0.7.releasejava

spring spring-bootMatch2.0.8.releasejava

spring spring-bootMatch2.0.9.releasejava

spring spring-bootMatch2.1.0.releasejava

spring spring-bootMatch2.1.1.releasejava

spring spring-bootMatch2.1.10.releasejava

spring spring-bootMatch2.1.11.releasejava

spring spring-bootMatch2.1.12.releasejava

spring spring-bootMatch2.1.13.releasejava

spring spring-bootMatch2.1.14.releasejava

spring spring-bootMatch2.1.15.releasejava

spring spring-bootMatch2.1.16.releasejava

spring spring-bootMatch2.1.17.releasejava

spring spring-bootMatch2.1.18.releasejava

spring spring-bootMatch2.1.2.releasejava

spring spring-bootMatch2.1.3.releasejava

spring spring-bootMatch2.1.4.releasejava

spring spring-bootMatch2.1.5.releasejava

spring spring-bootMatch2.1.6.releasejava

spring spring-bootMatch2.1.7.releasejava

spring spring-bootMatch2.1.8.releasejava

spring spring-bootMatch2.1.9.releasejava

spring spring-bootMatch2.2.0.releasejava

spring spring-bootMatch2.2.1.releasejava

spring spring-bootMatch2.2.10.releasejava

spring spring-bootMatch2.2.11.releasejava

spring spring-bootMatch2.2.12.releasejava

spring spring-bootMatch2.2.13.releasejava

spring spring-bootMatch2.2.2.releasejava

spring spring-bootMatch2.2.3.releasejava

spring spring-bootMatch2.2.4.releasejava

spring spring-bootMatch2.2.5.releasejava

spring spring-bootMatch2.2.6.releasejava

spring spring-bootMatch2.2.7.releasejava

spring spring-bootMatch2.2.8.releasejava

spring spring-bootMatch2.2.9.releasejava

spring spring-bootMatch2.3.0.releasejava

spring spring-bootMatch2.3.1.releasejava

spring spring-bootMatch2.3.10.releasejava

spring spring-bootMatch2.3.11.releasejava

spring spring-bootMatch2.3.12.releasejava

spring spring-bootMatch2.3.2.releasejava

spring spring-bootMatch2.3.3.releasejava

spring spring-bootMatch2.3.4.releasejava

spring spring-bootMatch2.3.5.releasejava

spring spring-bootMatch2.3.6.releasejava

spring spring-bootMatch2.3.7.releasejava

spring spring-bootMatch2.3.8.releasejava

spring spring-bootMatch2.3.9.releasejava

spring spring-bootMatch2.4.0java

spring spring-bootMatch2.4.1java

spring spring-bootMatch2.4.10java

spring spring-bootMatch2.4.11java

spring spring-bootMatch2.4.12java

spring spring-bootMatch2.4.13java

spring spring-bootMatch2.4.2java

spring spring-bootMatch2.4.3java

spring spring-bootMatch2.4.4java

spring spring-bootMatch2.4.5java

spring spring-bootMatch2.4.6java

spring spring-bootMatch2.4.7java

spring spring-bootMatch2.4.8java

spring spring-bootMatch2.4.9java

spring spring-bootMatch2.5.0java

spring spring-bootMatch2.5.1java

spring spring-bootMatch2.5.10java

spring spring-bootMatch2.5.11java

spring spring-bootMatch2.5.12java

spring spring-bootMatch2.5.13java

spring spring-bootMatch2.5.14java

spring spring-bootMatch2.5.15java

spring spring-bootMatch2.5.2java

spring spring-bootMatch2.5.3java

spring spring-bootMatch2.5.4java

spring spring-bootMatch2.5.5java

spring spring-bootMatch2.5.6java

spring spring-bootMatch2.5.7java

spring spring-bootMatch2.5.8java

spring spring-bootMatch2.5.9java

spring spring-bootMatch2.6.0java

spring spring-bootMatch2.6.1java

spring spring-bootMatch2.6.10java

spring spring-bootMatch2.6.11java

spring spring-bootMatch2.6.12java

spring spring-bootMatch2.6.13java

spring spring-bootMatch2.6.14java

spring spring-bootMatch2.6.15java

spring spring-bootMatch2.6.2java

spring spring-bootMatch2.6.3java

spring spring-bootMatch2.6.4java

spring spring-bootMatch2.6.5java

spring spring-bootMatch2.6.6java

spring spring-bootMatch2.6.7java

spring spring-bootMatch2.6.8java

spring spring-bootMatch2.6.9java

spring spring-bootMatch2.7.0java

spring spring-bootMatch2.7.1java

spring spring-bootMatch2.7.10java

spring spring-bootMatch2.7.11java

spring spring-bootMatch2.7.12java

spring spring-bootMatch2.7.13java

spring spring-bootMatch2.7.14java

spring spring-bootMatch2.7.15java

spring spring-bootMatch2.7.16java

spring spring-bootMatch2.7.17java

spring spring-bootMatch2.7.18java

spring spring-bootMatch2.7.2java

spring spring-bootMatch2.7.3java

spring spring-bootMatch2.7.4java

spring spring-bootMatch2.7.5java

spring spring-bootMatch2.7.6java

spring spring-bootMatch2.7.7java

spring spring-bootMatch2.7.8java

spring spring-bootMatch2.7.9java

spring spring-bootRange4.0.0–4.0.5java

spring spring-bootRange3.5.0–3.5.13java

spring spring-bootRange3.4.0–3.4.15java

spring spring-bootRange3.3.0–3.3.18java

spring spring-bootRange0.5.0.M1–2.7.32java

Source	Link
spring	www.spring.io/security/cve-2026-40973
github	www.github.com/spring-projects/spring-boot/commit/5ceb1a228932e35cc803d1c1fea68f0f984aaa90
github	www.github.com/advisories/GHSA-wwpq-f5c3-7hvx

11 Jul 2026 10:27Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17

EPSS0.00136

SSVC