CVE-2026-101056 · Brief

CVEs like CVE-2026-101056

The records whose text reads closest to CVE-2026-101056, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-545630.727
   Cloudreve: Path Traversal / Broken Access Control in Cloudreve WebDAV (`/dav`) — scoped DAV credential escapes its…

   Same weakness class, CWE-863 (incorrect authorization); same vendor or product family, cloudreve.

2. CVE-2026-545600.733
   Cloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim

   Same weakness class, CWE-863 (incorrect authorization); same vendor or product family, cloudreve.

3. CVE-2021-296420.642
   GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of…

   Same weakness class, CWE-863 (incorrect authorization).

4. CVE-2026-410490.646
   Caching of Authentication allows Authentication Bypass between users in qSnapper

   Same weakness class, CWE-863 (incorrect authorization).

5. CVE-2020-81190.681
   Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is…

   Related weakness classes, CWE-285 is above CWE-863.

6. CVE-2026-410480.640
   Caching of Authentication allows Authentication Bypass in qSnapper

   Same weakness class, CWE-863 (incorrect authorization).

7. CVE-2026-623230.741
   Cloudreve: Unauthorized file write via WOPI view sessions whose access token secret is ignored

   Same weakness class, CWE-863 (incorrect authorization); same vendor or product family, cloudreve.

8. CVE-2020-81220.658
   A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a…

   Related weakness classes, CWE-284 is above CWE-863.

9. CVE-2023-28440.666
   Authorization Bypass Through User-Controlled Key in cloudexplorer-dev/cloudexplorer-lite

   Related weakness classes, CWE-863 is above CWE-639.

10. CVE-2026-1010510.659
    Cloudreve before 4.16.1 Path Traversal via Remote Download

    Same vendor or product family, cloudreve.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-10-31.