CVE-2026-40677

None

CVSS

—

EPSS

0.5%

Published

Jun 12, 2026

CISA due date

—

The record

The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.

Affected packages

Ecosystem	Package	Introduced	Fixed