Login Request a demo
SB
Product
Spring Boot
by Spring · last CVE Jun 11, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 3High 4Medium 4Low 0
Severity
All severities11Critical3High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Spring Boot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40970
6.8
0%
Apr 27
When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server
Affected: 4.0.0 before 4.0.6
CVE-2026-40977
6.7
0%
Apr 27
When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corrupt one file on the host each time the…
Affected: 4.0.0 before 4.0.6; 3.5.0 before 3.5.14; 3.4.0 before 3.4.16; 3.3.0 before 3.3.19; 2.7.0 before 2.7.33
CVE-2026-41001
5.3
0%
Jun 11
Predictable Temp Directory in Artemis Auto-configuration
Affected: 4.0.0 before 4.0.6.1; 3.5.0 before 3.5.14.1; 3.4.0 before 3.4.17; 3.3.0 before 3.3.20; 2.7.0 before 2.7.34
CVE-2026-40992
5.0
0%
Jun 11
Mail Auto-Configuration Does Not Enable SSL Hostname Verification
Affected: 4.0.0 before 4.0.6.1; 3.5.0 before 3.5.14.1; 3.4.0 before 3.4.17
Showing 4