← CVE Intelligence

CVE-2026-40983

Micrometer gRPC server instrumentation DoS vulnerability PUBLISHED

Description (CNA)

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.

Affected (CNA)

Vendor / productVersions
Spring / Micrometeraffected 1.16.0 before 1.16.5.1; affected 1.15.0 before 1.15.11.1

CWE

CWE-400

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC (gRPC Remote Procedure Call) requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.