https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T07:29:20.409506+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-40992 CVE-2026-40992 — Mail Auto-Configuration Does Not Enable SSL Hostname Verification 2026-09-28T07:29:20.421449+00:00

Affected: Spring Boot

Spring Boot's Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.checkserveridentity=true, are not affected.

Affected versions: Spring Boot 4.0.0 through 4.0.6; 3.5.0 through 3.5.14; 3.4.0 through 3.4.16.