CVE-2026-59354 · Brief

CVEs like CVE-2026-59354

The records whose text reads closest to CVE-2026-59354, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-227520.822
   Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

2. CVE-2026-614660.722
   Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalation

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

3. CVE-2026-236030.628
   Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

4. CVE-2016-07810.637
   The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 to v2.7.4.1, UAA…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

5. CVE-2026-35300.626
   OpenID Connect / OAuth client - Moderately critical - Server-side request forgery, Information disclosure -…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

6. CVE-2026-445060.663
   Medplum - Exposure of OAuth client secret via dynamic registration endpoint in self-hosted configurations

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

7. CVE-2019-38760.638
   A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing for XSS generation…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

8. CVE-2026-1040560.629
   CVE-2026-104056

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

9. CVE-2026-597880.632
   Stored XSS vulnerability in OAuth configuration form

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

10. CVE-2026-1010480.631
    Cloudreve before 4.17.0 SSRF via Admin.Read OAuth scope

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.