CVE-2026-59900 · Brief

CVEs like CVE-2026-59900

The records whose text reads closest to CVE-2026-59900, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-1006590.828
   Netty 4.2.0 through 4.2.17 HTTP/3 Request Routing Bypass

   Same weakness class, CWE-444; same vendor or product family, netty.

2. CVE-2026-935690.813
   Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the…

   Same weakness class, CWE-444.

3. CVE-2026-715540.728
   h2: Duplicate Host header could facilitate request smuggling

   Same weakness class, CWE-444.

4. CVE-2019-204450.746
   HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second…

   Same weakness class, CWE-444; same vendor or product family, netty.

5. CVE-2022-418810.675
   Netty project is an event-driven asynchronous network application framework.

   Same vendor or product family, netty.

6. CVE-2019-168690.724
   Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding :…

   Same weakness class, CWE-444; same vendor or product family, netty.

7. CVE-2026-1006640.791
   Netty 4.2.2 through 4.2.17 HTTP/1 Host Header Authority Confusion

   Same vendor or product family, netty.

8. CVE-2019-204440.719
   HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a…

   Same weakness class, CWE-444; same vendor or product family, netty.

9. CVE-2020-72380.717
   Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a…

   Same weakness class, CWE-444; same vendor or product family, netty.

10. CVE-2021-392420.681
    An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3.

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-30.