CVE-2026-87785 · Brief

CVEs like CVE-2026-87785

The records whose text reads closest to CVE-2026-87785, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2022-429830.745
   anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens.

   Same weakness class, CWE-290.

2. CVE-2026-878020.765
   Apache Syncope: SRA OAuth2 JWT signature verification bypass

   Same vendor or product family, Apache.

3. CVE-2025-449630.741
   RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

4. CVE-2026-783300.814
   Apache Syncope: Privilege escalation for admin user via JWT authentication

   Same vendor or product family, Apache.

5. CVE-2024-82730.686
   Authentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing.This issue affects Server:…

   Same weakness class, CWE-290.

6. CVE-2022-23680.688
   Authentication Bypass by Spoofing in microweber/microweber

   Same weakness class, CWE-290.

7. CVE-2025-276950.679
   Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability.

   Same weakness class, CWE-290.

8. CVE-2018-68730.682
   The Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT audience is not…

   Related weakness classes, CWE-287 is above CWE-290.

9. CVE-2026-731780.809
   Apache Syncope: JWT Access Token takeover

   Same vendor or product family, Apache.

10. CVE-2022-392270.780
    Python-jwt subject to Authentication Bypass by Spoofing

    Same weakness class, CWE-290.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.