CVE-2026-86247 · Brief

CVEs like CVE-2026-86247

The records whose text reads closest to CVE-2026-86247, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-291450.730
   Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled

   Same vendor or product family, Apache.

2. CVE-2025-666140.687
   Apache Tomcat: Client certificate verification bypass due to virtual host mapping

   Same vendor or product family, Apache.

3. CVE-2026-502290.638
   Apache Tomcat: XSS in number guess example

   Same vendor or product family, Apache.

4. CVE-2023-427950.625
   Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

   Same vendor or product family, Apache.

5. CVE-2026-685690.645
   Apache Tomcat: Principal lookup can fail open in some cases

   Same vendor or product family, Apache.

6. CVE-2026-435140.653
   Apache Tomcat: AJP secret compared in non-constant time

   Same vendor or product family, Apache.

7. CVE-2026-777620.699
   Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled Request

   Related weakness classes, CWE-362 is above CWE-366; same vendor or product family, Apache.

8. CVE-2026-870220.630
   Apache Tomcat: WebSocket message smuggling with per-message-deflate

   Same vendor or product family, Apache.

9. CVE-2026-783830.625
   Apache Tomcat: AJP DoS via missing request body

   Same vendor or product family, Apache.

10. CVE-2018-80340.679
    The host name verification when using TLS with the WebSocket client was missing.

    Same vendor or product family, Apache.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.