CVE-2026-82437 · Brief

CVEs like CVE-2026-82437

The records whose text reads closest to CVE-2026-82437, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2019-02020.785
   The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm.

   Same vendor or product family, Apache.

2. CVE-2015-31880.631
   The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via…

   Same vendor or product family, Apache.

3. CVE-2026-824310.735
   Apache Storm Client: Authorization Bypass When nimbus.groups Is Configured Without nimbus.users

   Sibling weakness classes under CWE-285, CWE-862 and CWE-863; same vendor or product family, Apache.

4. CVE-2026-824320.690
   Apache Storm Nimbus: Blobstore Authorization Bypass via Rebalance Configuration Overrides

   Sibling weakness classes under CWE-285, CWE-862 and CWE-863; same vendor or product family, Apache.

5. CVE-2017-97990.655
   It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it…

   Same vendor or product family, Apache.

6. CVE-2018-13320.676
   Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that…

   Same vendor or product family, Apache.

7. CVE-2018-13310.645
   In Apache Storm 0.10.0 through 0.10.2, 1.0.0 through 1.0.6, 1.1.0 through 1.1.2, and 1.2.0 through 1.2.1, an attacker…

   Same vendor or product family, Apache.

8. CVE-2026-841790.710
   Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Merged Daemon Configuration via the Topology Page

   Same vendor or product family, Apache.

9. CVE-2026-824330.736
   Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UI

   Same vendor or product family, Apache.

10. CVE-2026-824340.739
    Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs

    Same vendor or product family, Apache.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.