VulnSocial

CVE-2026-40971Disclosure(vmware / spring_boot)

LOWCVSS 9.1 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch vmware spring_boot systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker. Affected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6), 3.5.0–3.5.13 (fix 3.5.14) per vendor advisory.

vmware CVEsBack to dashboard
2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-295

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • spring_boot

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-04-27); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
vmware
Products
spring_boot

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-27: 2Mentions · 2026-05-17: 1PoC Mentioned / Linked · 2026-05-17: 1Patch / Workaround · 2026-04-27: 1Technical Details · 2026-04-27: 204-2705-17
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-272
Disclosure2
2026-05-171
Disclosure1
Full discourse3 posts
  • Israel@f1tym1
    Disclosure

    CVE-2026-40971 | Vmware Spring Boot up to 3.5.13/4.0.5 RabbitMQ Auto-configuration certificate validation https://ift.tt/g0Six1V A vulnerability, which was classified as critical, was found in Vmware Spring Boot up to 3.5.13/4.0.5. This affects an unknown part of the component…

    Post summary

    The post announces a critical vulnerability (CVE‑2026‑40971) affecting VMware Spring Boot's RabbitMQ auto‑configuration and provides a link likely containing more technical details.

    0000059
    974 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-40971 When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker. Affect… https://www.cve.org/CVERecord?id=CVE-2026-40971

    Post summary

    The text discloses CVE-2026-40971, describing a missing hostname verification issue in Spring Boot’s RabbitMQ auto-configuration with SSL bundles, but provides no PoC, exploit code, or patch information.

    0000057
    57.3K followersView on X
  • ThreatCluster@threatcluster
    Disclosure

    BREAKING: Spring Boot SSL bundle bug in CVE-2026-40970 and CVE-2026-40971 disables TLS hostname verification for Elasticsearch and RabbitMQ, exposing apps to MITM until upgraded. https://threatcluster.io/cluster/critical-vulnerabilities-in-spring-boots-ssl-configuration-f-b593581f

    Post summary

    An SSL bundle issue in Spring Boot disables TLS hostname verification for Elasticsearch and RabbitMQ, exposing applications to man‑in‑the‑middle attacks until an update is applied.

    0000066
    160 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appvmwarespring_boot---

Explore more

Back to dashboardvmware CVEsspring_boot vulnerabilities