CVE-2026-59318 · Brief

CVEs like CVE-2026-59318

The records whose text reads closest to CVE-2026-59318, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-760660.653
   IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode

   Sibling weakness classes under CWE-285, CWE-863 and CWE-862.

2. CVE-2026-614390.601
   PraisonAI before 4.6.78 Prompt Injection Defense Bypass

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

3. CVE-2026-187330.607
   Prompt injection bypasses shell tool consent gate in Strands Agents Tools

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

4. CVE-2021-220510.648
   Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra…

   Same weakness class, CWE-863 (incorrect authorization); same vendor or product family, Spring.

5. CVE-2019-02580.600
   SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user…

   Sibling weakness classes under CWE-285, CWE-863 and CWE-862.

6. CVE-2026-560740.630
   PraisonAI - Tool Approval Cache Bypass via Coarse-Grained Caching

   Same weakness class, CWE-863 (incorrect authorization).

7. CVE-2023-439610.623
   An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted…

   Same weakness class, CWE-863 (incorrect authorization).

8. CVE-2018-12580.655
   Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization…

   Same weakness class, CWE-863 (incorrect authorization).

9. CVE-2023-474580.641
   An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions…

   Sibling weakness classes under CWE-285, CWE-863 and CWE-862.

10. CVE-2026-409790.623
    In Spring AI, having access to a shared environment can expose the ONNX model used by the application.

    Same vendor or product family, Spring.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.