How to verify CVE-2026-40370

Confirm whether your systems are actually affected — run the exact detection check below (Nuclei command or OpenVAS NVT). Detection only; it does not exploit.

Verify with OpenVAS

Greenbone/OpenVAS ships 10 NVT checks for CVE-2026-40370. OpenVAS detects this CVE by NVT OID — enable the NVT in your scan config, or confirm it is in your feed with the query below.

Confirm the NVT is in your feed (GMP)

gvm-cli socket --xml "<get_nvts nvt_oid='1.3.6.1.4.1.25623.1.3.3.11478.0.5090347.4952464846504949484650' details='1'/>"

NVT OIDs (10)

1.3.6.1.4.1.25623.1.3.3.11478.0.5090347.4952464846504949484650since 2026-06-25
1.3.6.1.4.1.25623.1.3.3.11821.0.5090408.4953464846504955484649since 2026-06-25
1.3.6.1.4.1.25623.1.3.3.12048.0.5089271.4951464846545257484649since 2026-06-25
1.3.6.1.4.1.25623.1.3.3.12053.0.5089270.4951464846554856534649since 2026-06-25
1.3.6.1.4.1.25623.1.3.3.12145.0.5090354.4952464846515351484650since 2026-06-25
1.3.6.1.4.1.25623.1.3.3.12147.0.5091158.4954464846494956484649since 2026-06-25
1.3.6.1.4.1.25623.1.3.3.16785.0.5090407.4953464846525255484649since 2026-06-25
1.3.6.1.4.1.25623.1.3.3.20748.0.5091223.4955464846494949534649since 2026-06-25
1.3.6.1.4.1.25623.1.3.3.21091.0.5089900.4954464846525053504651since 2026-06-25
1.3.6.1.4.1.25623.1.3.3.21289.0.5089899.4955464846524852484649since 2026-06-25

New to OpenVAS? Greenbone documentation ↗

Confirmed exposed? That's one CVE on one host.

We check your whole external estate — hundreds of IPs and domains — for this and thousands more, on a schedule.

Scan my estate

Verify another CVE