CVE-2026-40981 · Brief

CVEs like CVE-2026-40981

The records whose text reads closest to CVE-2026-40981, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-227390.668
   Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks

   Same vendor or product family, Spring.

2. CVE-2026-409820.717
   Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server…

   Same vendor or product family, Spring.

3. CVE-2026-478940.689
   Spring Cloud Config Server Native Environment Repository Exposure

   Same vendor or product family, Spring.

4. CVE-2020-54100.702
   Directory Traversal with spring-cloud-config-server

   Same vendor or product family, Spring.

5. CVE-2020-54050.696
   Directory Traversal with spring-cloud-config-server

   Same vendor or product family, Spring.

6. CVE-2026-478370.660
   Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests

   Same vendor or product family, Spring.

7. CVE-2019-37990.715
   Directory Traversal with spring-cloud-config-server

   Same vendor or product family, Spring.

8. CVE-2026-410040.752
   When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.

   Same vendor or product family, Spring.

9. CVE-2025-222320.725
   Spring Cloud Config Server May Not Use Vault Token Sent By Clients

   Same vendor or product family, Spring.

10. CVE-2021-220510.675
    Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra…

    Related weakness classes, CWE-863 is above CWE-639; same vendor or product family, Spring.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.