CVE-2026-41008 · Brief

CVEs like CVE-2026-41008

The records whose text reads closest to CVE-2026-41008, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2019-37780.852
   Open Redirect in spring-security-oauth2

   Same weakness class, CWE-601; same vendor or product family, Spring.

2. CVE-2026-593550.941
   Spring Authorization Server: Open Redirect via request_uri parameter

   Same weakness class, CWE-601.

3. CVE-2014-36520.711
   JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.

   Same weakness class, CWE-601.

4. CVE-2019-112690.833
   Open Redirector in spring-security-oauth2

   Same weakness class, CWE-601; same vendor or product family, Spring.

5. CVE-2019-130380.695
   mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the…

   Same weakness class, CWE-601.

6. CVE-2021-229420.702
   A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow…

   Same weakness class, CWE-601.

7. CVE-2024-257150.720
   Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri.

   Same weakness class, CWE-601.

8. CVE-2020-268770.757
   ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an…

   Same weakness class, CWE-601.

9. CVE-2026-540720.749
   Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL

   Same weakness class, CWE-601.

10. CVE-2018-65200.690
    SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted…

    Same weakness class, CWE-601.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.