CyberRota
Back to database

CVE-2026-40970

MEDIUM · CVSS 5 EPSS 0.02%

Source: NVD + CISA KEV + EPSS · Published: 2026-04-27 · Last synced: 2026-05-27

CyberRota Analysis

Detaylı analiz gerekiyor.

CVE
CVE-2026-40970
Severity
MEDIUM
CVSS
5
EPSS
0.02%

Original NVD Description

When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server. Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.