{"metadata": {"vulnerability": "CVE-2026-40976", "count": 62, "kinds": {"milestone": 18, "sighting": 8, "kev": 0, "other": 36}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0256", "record": "NCSC-2026-0256", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0258", "record": "NCSC-2026-0258", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-16T02:19:04.616Z", "date_only": false, "value": "2026-04-16T02:19:04.616Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-40976", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": true, "value": "2026-04-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0488", "record": "CERTFR-2026-AVI-0488", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-04-23T22:00:00Z", "date_only": false, "value": "2026-04-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1263", "record": "WID-SEC-W-2026-1263", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-23T22:00:00Z", "date_only": false, "value": "2026-04-23T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1263", "record": "WID-SEC-W-2026-1263", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-04-23T22:00:00Z", "date_only": false, "value": "2026-04-23T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1263", "record": "WID-SEC-W-2026-1263", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0488", "record": "CERTFR-2026-AVI-0488", "field": "last_revision_date"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0488", "record": "CERTFR-2026-AVI-0488", "field": "initial_release_date"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0488", "record": "CERTFR-2026-AVI-0488", "field": "revisions.0.revision_date"}, {"timestamp": "2026-04-24T13:35:33.479Z", "date_only": false, "value": "2026-04-24T13:35:33.479317Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mkanfgg2pj2e", "record": "CVE-2026-40976", "field": "creation_timestamp", "uuid": "d92f2ba6-d7b6-4c60-b5e2-e0589ac75b2a", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mkanfgg2pj2e"}, {"timestamp": "2026-04-27T05:23:49.859Z", "date_only": false, "value": "2026-04-27T05:23:49.859718Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mkhdcsbjs22h", "record": "CVE-2026-40976", "field": "creation_timestamp", "uuid": "19bc7c0f-56af-4500-b643-705b331328c2", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mkhdcsbjs22h"}, {"timestamp": "2026-04-27T22:00:00Z", "date_only": false, "value": "2026-04-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1263", "record": "WID-SEC-W-2026-1263", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-04-27T23:34:51.422Z", "date_only": false, "value": "2026-04-27T23:34:51.422Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-40976", "field": "containers.adp.1.datePublic"}, {"timestamp": "2026-04-27T23:34:51.422Z", "date_only": false, "value": "2026-04-27T23:34:51.422Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-40976", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-04-27T23:34:51.422Z", "date_only": false, "value": "2026-04-27T23:34:51.422Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-40976", "field": "containers.adp.1.timeline.1.time"}, {"timestamp": "2026-04-27T23:34:51.422Z", "date_only": false, "value": "2026-04-27T23:34:51.422Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "CVE-2026-40976", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-40976", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40976", "record": "FKIE_CVE-2026-40976", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-04-28T00:01:23.121Z", "date_only": false, "value": "2026-04-28T00:01:23.121Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-40976", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2026-04-28T00:16:24Z", "date_only": false, "value": "2026-04-28T00:16:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8V8J-3HXP-93WR", "record": "GHSA-8V8J-3HXP-93WR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-04-28T00:16:24.803Z", "date_only": false, "value": "2026-04-28T00:16:24.803", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40976", "record": "FKIE_CVE-2026-40976", "field": "published"}, {"timestamp": "2026-04-28T00:31:41Z", "date_only": false, "value": "2026-04-28T00:31:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8V8J-3HXP-93WR", "record": "GHSA-8V8J-3HXP-93WR", "field": "published"}, {"timestamp": "2026-04-28T01:01:21.652Z", "date_only": false, "value": "2026-04-28T01:01:21.652683Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjf4ij2sh2k", "record": "CVE-2026-40976", "field": "creation_timestamp", "uuid": "7a7eec4a-d1a1-4727-b2d6-5e92b561bf49", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjf4ij2sh2k"}, {"timestamp": "2026-04-28T09:27:42Z", "date_only": false, "value": "2026-04-28T09:27:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-vulnerabilities-spring-boot-patch-immediately", "record": "CVE-2026-40976", "field": "creation_timestamp", "uuid": "41c92a0e-0cc6-479e-a44f-94444c036ead", "url": "https://ccb.belgium.be/advisories/warning-multiple-vulnerabilities-spring-boot-patch-immediately"}, {"timestamp": "2026-04-29T03:55:41.205Z", "date_only": false, "value": "2026-04-29T03:55:41.205Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-40976", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-30T15:07:08.199Z", "date_only": false, "value": "2026-04-30T15:07:08.199709Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkpvcpic6j2q", "record": "CVE-2026-40976", "field": "creation_timestamp", "uuid": "afc2ea75-dc2e-47a8-a663-563ea8a0e574", "content": "\ud83d\udccc CVE-2026-40976 - In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vu... https://www.cyberhub.blog/cves/CVE-2026-40976", "url": "https://bsky.app/profile/cyberhub.blog/post/3mkpvcpic6j2q"}, {"timestamp": "2026-05-03T19:07:02.485Z", "date_only": false, "value": "2026-05-03T19:07:02.485630Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mkxu4gpwt72y", "record": "CVE-2026-40976", "field": "creation_timestamp", "uuid": "91f0d88b-1b28-4b17-9855-25f07088847f", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-40976 vmware\u306espring\u00a0boot\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nSpring Boot \u306b\u304a\u3044\u3066\u3001\u7279\u5b9a\u306e\u6761\u4ef6\u4e0b\u3067\u65e2\u5b9a\u306e Web \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u304c\u6709\u52b9\u306b\u6a5f\u80fd\u305b\u305a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u5229\u7528\u8005\u304c\u3059\u3079\u3066\u306e\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3078\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u8106\u5f31\u6027\u3067\u3059\u3002", "url": "https://bsky.app/profile/keiwork35.bsky.social/post/3mkxu4gpwt72y"}, {"timestamp": "2026-05-06T18:54:08Z", "date_only": false, "value": "2026-05-06T18:54:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8V8J-3HXP-93WR", "record": "GHSA-8V8J-3HXP-93WR", "field": "modified"}, {"timestamp": "2026-05-12T22:00:00Z", "date_only": false, "value": "2026-05-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1263", "record": "WID-SEC-W-2026-1263", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-05-14T22:00:00Z", "date_only": false, "value": "2026-05-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1263", "record": "WID-SEC-W-2026-1263", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-05-28T22:00:00Z", "date_only": false, "value": "2026-05-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1263", "record": "WID-SEC-W-2026-1263", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-06-02T22:00:00Z", "date_only": false, "value": "2026-06-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1263", "record": "WID-SEC-W-2026-1263", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-06-07T22:00:00Z", "date_only": false, "value": "2026-06-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1263", "record": "WID-SEC-W-2026-1263", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-06-10T22:00:00Z", "date_only": false, "value": "2026-06-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1263", "record": "WID-SEC-W-2026-1263", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-06-10T22:00:00Z", "date_only": false, "value": "2026-06-10T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1263", "record": "WID-SEC-W-2026-1263", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-11T10:26:04.306Z", "date_only": false, "value": "2026-06-11T10:26:04.306+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1263", "record": "WID-SEC-W-2026-1263", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-15T01:00:17.230Z", "date_only": false, "value": "2026-07-15T01:00:17.230Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-40976", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-15T01:00:17.230Z", "date_only": false, "value": "2026-07-15T01:00:17.230Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-40976", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-22T14:02:35.271Z", "date_only": false, "value": "2026-07-22T14:02:35.271711Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0256", "record": "NCSC-2026-0256", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-22T14:02:35.271Z", "date_only": false, "value": "2026-07-22T14:02:35.271711Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0256", "record": "NCSC-2026-0256", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-22T14:02:35.271Z", "date_only": false, "value": "2026-07-22T14:02:35.271711Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0256", "record": "NCSC-2026-0256", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-22T15:20:37.999Z", "date_only": false, "value": "2026-07-22T15:20:37.999858Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0258", "record": "NCSC-2026-0258", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-22T15:20:37.999Z", "date_only": false, "value": "2026-07-22T15:20:37.999858Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0258", "record": "NCSC-2026-0258", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-22T15:20:37.999Z", "date_only": false, "value": "2026-07-22T15:20:37.999858Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0258", "record": "NCSC-2026-0258", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-24T21:10:00.143Z", "date_only": false, "value": "2026-07-24T21:10:00.143", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40976", "record": "FKIE_CVE-2026-40976", "field": "lastModified"}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-MX72251", "record": "CLEANSTART-2026-MX72251", "field": "published"}, {"timestamp": "2026-09-03T12:00:05.844Z", "date_only": false, "value": "2026-09-03T12:00:05.844105Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100899", "record": "CVE-2026-40976", "field": "creation_timestamp", "uuid": "8029db23-0b8d-4ccc-8b4b-7c411c0c31fc", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40976-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a madebyrokit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 08:31:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100899"}, {"timestamp": "2026-09-18T10:07:02.307Z", "date_only": false, "value": "2026-09-18T10:07:02.307183Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-UJ95320", "record": "CLEANSTART-2026-UJ95320", "field": "published"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-MX72251", "record": "CLEANSTART-2026-MX72251", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-MX72251", "record": "CLEANSTART-2026-MX72251", "field": "withdrawn"}, {"timestamp": "2026-09-23T14:20:04.852Z", "date_only": false, "value": "2026-09-23T14:20:04.852512Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw6wqykfdp24", "record": "CVE-2026-40976", "field": "creation_timestamp", "uuid": "6d0d12a5-a5e8-44ed-8c12-a27774bd89fd", "content": "CVE-2026-40976 - org.springframework.boot:spring-boot\nSeveral Spring Boot packages that you may use in Maven have a weakness that could let an attacker cause the application to execute unwanted code.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#springframework #Java #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mw6wqykfdp24"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": true, "value": "2026-10-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.13.published_at"}, {"timestamp": "2026-10-09T06:06:22Z", "date_only": false, "value": "2026-10-09T06:06:22Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-UJ95320", "record": "CLEANSTART-2026-UJ95320", "field": "modified"}, {"timestamp": "2026-10-11T00:00:00Z", "date_only": true, "value": "2026-10-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-10-12T00:00:00Z", "date_only": true, "value": "2026-10-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.7.published_at"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.15.published_at"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": true, "value": "2026-10-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "last_revision_date"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "initial_release_date"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1336", "record": "CERTFR-2026-AVI-1336", "field": "revisions.0.revision_date"}]}