CVE-2026-40968 · Brief

CVEs like CVE-2026-40968

The records whose text reads closest to CVE-2026-40968, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2021-221120.638
   Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported…

   Same vendor or product family, Spring.

2. CVE-2011-27310.652
   Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

3. CVE-2026-409690.769
   Spring gRPC AuthenticationException message reflected to remote client

   Same vendor or product family, Spring.

4. CVE-2022-415740.627
   An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

5. CVE-2026-444130.630
   In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

6. CVE-2021-221760.619
   An issue has been discovered in GitLab affecting all versions starting with 3.0.1.

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

7. CVE-2021-257740.627
   In JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of another user.

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

8. CVE-2023-497060.633
   Defective request context handling in Self Service in LinOTP 3.x before 3.2.5 allows remote unauthenticated attackers…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

9. CVE-2023-14170.614
   An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

10. CVE-2023-439610.619
    An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.