CVE-2026-40972 · Brief

CVEs like CVE-2026-40972

The records whose text reads closest to CVE-2026-40972, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-480110.651
   Shopware: Timing-attack on admin panel allowing enumeration of administrator usernames

   Same weakness class, CWE-208.

2. CVE-2026-414070.668
   OpenClaw < 2026.4.2 - Timing Side Channel in Shared-Secret Comparison

   Same weakness class, CWE-208.

3. CVE-2026-435140.678
   Apache Tomcat: AJP secret compared in non-constant time

   Same weakness class, CWE-208.

4. CVE-2025-709490.655
   An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a…

   Same weakness class, CWE-208.

5. CVE-2024-523070.645
   authentik allows a timing attack due to missing constant time comparison for metrics view

   Same weakness class, CWE-208.

6. CVE-2026-631320.652
   OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack

   Same weakness class, CWE-208.

7. CVE-2025-279360.653
   Webhook Secret Exposure via Timing attack in MSteams plugin

   Same weakness class, CWE-208.

8. CVE-2026-331290.641
   h3 has an observable timing discrepancy in basic auth utils

   Same weakness class, CWE-208.

9. CVE-2026-567640.662
   Hono - Timing Attack in basicAuth and bearerAuth Middleware

   Same weakness class, CWE-208.

10. CVE-2020-152370.650
    Timing attack in Shrine

    Same weakness class, CWE-208.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.