vciy

CVE-2026-59311 · Brief

CVEs like CVE-2026-59311

The records whose text reads closest to CVE-2026-59311, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

  1. Predictable Temp Directory in Artemis Auto-configuration

    Same vendor or product family, Spring.

  2. pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory.

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  3. p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.

    Same weakness class, CWE-59.

  4. mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain…

    Same weakness class, CWE-59.

  5. 7-Zip before 25.01 does not always properly handle symbolic links during extraction.

    Same weakness class, CWE-59.

  6. trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite…

    Same weakness class, CWE-59.

  7. Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without…

    Sibling weakness classes under CWE-706, CWE-59 and CWE-22; same vendor or product family, Spring.

  8. Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP…

    Same weakness class, CWE-59.

  9. sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a…

    Same weakness class, CWE-59.

  10. zarafa-autorespond in Zarafa Collaboration Platform (ZCP) before 7.2.1 allows local users to gain privileges via a…

    Same weakness class, CWE-59.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.