vciy

CVE-2026-40993 · Brief

CVEs like CVE-2026-40993

The records whose text reads closest to CVE-2026-40993, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

  1. CVE-2016-10000270.704
    Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java…

    Same weakness class, CWE-502 (deserialization of untrusted data).

  2. CVE-2025-117390.685
    CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with…

    Same weakness class, CWE-502 (deserialization of untrusted data).

  3. CVE-2023-489670.687
    Ssolon <= 2.6.0 and <=2.5.12 is vulnerable to Deserialization of Untrusted Data.

    Same weakness class, CWE-502 (deserialization of untrusted data).

  4. CVE-2023-70320.702
    A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker logged in with a user…

    Same weakness class, CWE-502 (deserialization of untrusted data).

  5. CVE-2026-478780.691
    Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist

    Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Spring.

  6. CVE-2021-369810.721
    In the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to…

    Same weakness class, CWE-502 (deserialization of untrusted data).

  7. CVE-2024-407110.684
    A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code…

    Same weakness class, CWE-502 (deserialization of untrusted data).

  8. CVE-2021-214880.702
    Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to…

    Same weakness class, CWE-502 (deserialization of untrusted data).

  9. CVE-2018-207320.689
    SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java…

    Same weakness class, CWE-502 (deserialization of untrusted data).

  10. CVE-2020-75320.700
    A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and…

    Same weakness class, CWE-502 (deserialization of untrusted data).

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.