CVE-2026-40677
No fix known EPSS <1%CVSS 7.7
The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.
Products: AMD Management Console (AMC), AMD Ryzen™ Master, AMD μProf