CVE-2026-40677

The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.

Score

CVSS 4.0 7.7 High

Status

Awaiting Analysis - psirt@amd.com

Published

2026-06-12

Last modified

2026-06-13

Weaknesses

CWE-1428

Affected products

• Amd Management Console Amc (Amd)
• Amd Prof (Amd)
• Amd Ryzen Master (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9027.html