What’s Vulnerable › Vulnerabilities
CVE-2026-40677
- Severity: high (CVSS 7.7 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-12 · updated 2026-06-17
- Weakness: CWE-1428
Description
The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.
Affected products
- AMD Management Console (AMC): all versions
- AMD Ryzen™ Master: all versions
- AMD μProf: all versions
References
Get alerted when CVE-2026-40677 or the next vulnerability affects your stack