xiaoqiMikko/scc-check

PoC

Offline checker for Spring Cloud Config CVE-2026-40982 — tells you whether your version line has an OSS fix at all (3.1.x/4.1.x/4.2.x: it does not)

view exploit source poc_in_githubauthor xiaoqiMikkopublished 2026-08-05catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-40982US	—	0.73% (54th)	Exploit	2026-05-07
Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request us…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.