网安资讯详情 - SecLens 情报雷达

Spring Boot Improper Certificate Validation Vulnerability in Some Huawei Products

来源： huawei_security · 发布时间 2026-07-22 08:00 (UTC+08:00) · 抓取时间 2026-07-22 21:42 (UTC+08:00)

摘要

The open-source software Spring Boot used by some Huawei products has an improper certificate validation vulnerability. Successful exploitation of this vulnerability may enable a man-in-the-middle attack, potentially leading to information disclosure, data tampering, or denial of service (DoS). (Vulnerability ID:HWPSIRT-2026-49982) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2026-40974

标签

• Critical

扩展字段

{
  "hw_psirt_ids": [
    "HWPSIRT-2026-49982"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-SBICVViSHP-38377160",
  "sasn_version": "1.2",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2026-40974",
      "hwPsirtId": "HWPSIRT-2026-49982"
    }
  ]
}