VULNERABILITY INTELLIGENCE

CVE-2026-40677

CVSS score7.7 HIGH

EPSS probability0.43%

CISA KEVNot currently listed

Published2026-06-12

Last modified2026-06-17

Description

The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.