{"id":"CVE-2026-40668","published":"2026-11-10T22:18:32.777","lastModified":"2026-11-10T22:18:32.777","description":"Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to request attestation reports for VMPL 0.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-290"],"vendors":[],"products":[],"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3038.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}