CVE-2026-54251 · Brief

CVEs like CVE-2026-54251

The records whose text reads closest to CVE-2026-54251, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2016-49700.621
   handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

2. CVE-2026-480400.783
   netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to…

   Same vendor or product family, netty-incubator-codec-ohttp.

3. CVE-2017-137630.628
   ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated.

   Related weakness classes, CWE-664 is above CWE-770.

4. CVE-2022-21910.638
   In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release…

   Related weakness classes, CWE-664 is above CWE-404.

5. CVE-2014-01930.657
   WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

6. CVE-2020-72260.641
   CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger…

   Related weakness classes, CWE-664 is above CWE-770.

7. CVE-2019-204450.614
   HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

8. CVE-2014-35670.639
   Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

9. CVE-2015-02060.621
   Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k…

   Related weakness classes, CWE-664 is above CWE-119.

10. CVE-2022-418810.628
    Netty project is an event-driven asynchronous network application framework.

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Fetched 2026-11-02.