CVEs like CVE-2026-8922

The records whose text reads closest to CVE-2026-8922, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

CVE-2026-97920.693
Keycloak: keycloak: security restriction bypass allows unauthorized ropc token acquisition
Same vendor or product family, Red.
CVE-2026-182180.779
Keycloak-services: keycloak-services: client not-before revocation ignored when realm not-before is older but nonzero
Same vendor or product family, Red.
CVE-2025-145590.684
Org.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for…
Same vendor or product family, Red.
CVE-2026-182080.737
Keycloak-services: keycloak-services: inactive out-of-audience token introspection leaks signed jwt claim
Same vendor or product family, Red.
CVE-2026-939990.729
Keycloak-services: keycloak-services: token refresh continues issuing tokens for disabled audience clients
Same vendor or product family, Red.
CVE-2026-10350.648
Org.keycloak.protocol.oidc: keycloak refresh token reuse bypass via toctou race condition
Same vendor or product family, Red.
CVE-2026-1076230.725
Keycloak-services: keycloak-services: oidc dcr read-modify-write silently disables offline token revocation
Same vendor or product family, Red.
CVE-2026-14860.673
Org.keycloak.protocol.oidc.grants: disabled identity providers are still accepted for jwt authorization grant
Same vendor or product family, Red.
CVE-2026-88300.646
Keycloak: org.keycloak/keycloak-services: keycloak: policy bypass during webauthn credential registration via…
Sibling weakness classes under CWE-1390, CWE-303 and CWE-603; same vendor or product family, Red.
CVE-2026-159430.693
Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change
Same vendor or product family, Red.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-29.