CVE-2026-90959 · Brief

CVEs like CVE-2026-90959

The records whose text reads closest to CVE-2026-90959, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2019-99480.671
   urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to…

   Same weakness class, CWE-22 (path traversal).

2. CVE-2019-115100.678
   In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an…

   Same weakness class, CWE-22 (path traversal).

3. CVE-2016-43200.671
   Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a…

   Same weakness class, CWE-22 (path traversal).

4. CVE-2025-658380.663
   PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method.

   Same weakness class, CWE-22 (path traversal).

5. CVE-2026-192640.690
   Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover

   Same weakness class, CWE-22 (path traversal).

6. CVE-2026-127010.786
   Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport

   Same weakness class, CWE-22 (path traversal); same vendor or product family, Red.

7. CVE-2022-440160.659
   An issue was discovered in Simmeth Lieferantenmanager before 5.6.

   Same weakness class, CWE-22 (path traversal).

8. CVE-2021-304970.662
   Ivanti Avalanche (Premise) 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path…

   Same weakness class, CWE-22 (path traversal).

9. CVE-2022-315240.667
   The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask…

   Same weakness class, CWE-22 (path traversal).

10. CVE-2022-459210.660
    FusionAuth before 1.41.3 allows a file outside of the application root to be viewed or retrieved using an HTTP request.

    Same weakness class, CWE-22 (path traversal).

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.