CVE-2026-40969 — The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the au — CVE Database · The Intelligence Room