Micrometer gRPC server instrumentation DoS vulnerability
CVE-2026-40983

7.5HIGH

Key Information:

What is CVE-2026-40983?

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition.

Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.

Micrometer 1.16.0 < 1.16.6

Micrometer 1.15.0 < 1.15.12

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

CVE-2026-40983 Data