CVE-2026-84647 · Brief

CVEs like CVE-2026-84647

The records whose text reads closest to CVE-2026-84647, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2017-10003530.715
   Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

2. CVE-2026-534350.763
   In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

3. CVE-2018-10008610.807
   A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

4. CVE-2026-846500.784
   In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

5. CVE-2026-425210.728
   Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

6. CVE-2021-216770.683
   Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

7. CVE-2017-26080.751
   Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the…

   Same weakness class, CWE-502 (deserialization of untrusted data).

8. CVE-2017-10003550.751
   Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an XStream: Java crash when…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

9. CVE-2021-216040.793
   Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various…

   Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

10. CVE-2026-704260.703
    In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS…

    Same weakness class, CWE-502 (deserialization of untrusted data); same vendor or product family, Jenkins.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.