CVE-2026-48917 · Brief

CVEs like CVE-2026-48917

The records whose text reads closest to CVE-2026-48917, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-1038770.721
   Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements

   Same weakness class, CWE-502 (deserialization of untrusted data).

2. CVE-2021-216770.728
   Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

3. CVE-2017-10003530.732
   Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

4. CVE-2026-846500.760
   In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

5. CVE-2017-26080.758
   Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the…

   Same weakness class, CWE-502 (deserialization of untrusted data).

6. CVE-2023-372270.692
   Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.

   Same weakness class, CWE-502 (deserialization of untrusted data).

7. CVE-2026-425210.723
   Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

8. CVE-2026-846460.767
   In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

9. CVE-2022-35250.710
   Deserialization of Untrusted Data in librenms/librenms

   Same weakness class, CWE-502 (deserialization of untrusted data).

10. CVE-2026-846700.761
    Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that can be instantiated when…

    Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.