CVE-2026-40982 — Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially craf — CVE Database · The Intelligence Room