VIR Vulnerability Intelligence Relay

CVE-2026-40970

medium
Published 2026-04-27 · Modified 2026-05-06
CVSS v3
6.8
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v2
—
VIR risk
6.8

Description

Spring Boot's Elasticsearch auto-configuration doesn't perform hostname verification when connecting to the Elasticsearch server.

Predictions

Exploit likelihood
67%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: security@vmware.com — https://spring.io/security/cve-2026-40970

Package impact
EcosystemPackageVulnerableFixed
java Mavenorg.springframework.boot:spring-boot-elasticsearch>=4.0.0,<4.0.64.0.6
java MAVENorg.springframework.boot:spring-boot-elasticsearch>= 4.0.0, < 4.0.64.0.6

Application impact
VendorProductVersionsFixed
vmwarespring_boot{"startIncluding":"4.0.0","endExcluding":"4.0.6"}4.0.6

References

CWEs

CWE-295

Verify integrity in audit chain (admin only). AS-IS.