CVE-2026-75936 · Brief

CVEs like CVE-2026-75936

The records whose text reads closest to CVE-2026-75936, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-857860.913
   Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java

   Same weakness class, CWE-409; same vendor or product family, Amazon.

2. CVE-2016-71660.708
   libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

3. CVE-2026-1032620.695
   Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClient

   Same weakness class, CWE-409.

4. CVE-2026-759350.769
   Memory-amplification denial of service via declared-length preallocation in Amazon ion-java

   Same vendor or product family, Amazon.

5. CVE-2026-750470.692
   In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint

   Same weakness class, CWE-409.

6. CVE-2026-598030.716
   rpcx - Denial of Service via Gzip Decompression Bomb in Wire Protocol

   Same weakness class, CWE-409.

7. CVE-2026-1119240.749
   Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression

   Same weakness class, CWE-409.

8. CVE-2026-441600.715
   Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`

   Same weakness class, CWE-409.

9. CVE-2026-441620.721
   fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`

   Same weakness class, CWE-409.

10. CVE-2026-919790.708
    Vikunja before 2.6.0 Denial of Service via Decompression Bomb

    Related weakness classes, CWE-400 is above CWE-409.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.