vciy

CVE-2026-41001 · Brief

CVEs like CVE-2026-41001

The records whose text reads closest to CVE-2026-41001, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

  1. CVE-2026-409730.692
    A local attacker on the same host as the application may be able to take control of the directory used by…

    Same weakness class, CWE-377; same vendor or product family, Spring.

  2. CVE-2021-386060.584
    reNgine through 0.5 relies on a predictable directory name.

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  3. CVE-2026-409720.583
    An attacker on the same network as the remote application may be able to utilize a timing attack to discover…

    Same vendor or product family, Spring.

  4. CVE-2026-332270.592
    Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  5. CVE-2023-208730.591
    In Spring Boot versions 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions, an application that is deployed…

    Same vendor or product family, Spring.

  6. CVE-2026-409750.575
    Values produced by ${random.value} are not suitable for use as secrets.

    Same vendor or product family, Spring.

  7. CVE-2026-493630.574
    Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  8. CVE-2023-299860.601
    spring-boot-actuator-logview 0.2.13 allows Directory Traversal to sibling directories via LogViewEndpoint.view.

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  9. CVE-2026-493640.602
    Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  10. CVE-2019-38810.584
    Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for…

    Sibling weakness classes under CWE-668, CWE-377 and CWE-427.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.