CVE-2026-91203 · Brief

CVEs like CVE-2026-91203

The records whose text reads closest to CVE-2026-91203, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-912050.896
   Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race

   Same weakness class, CWE-363; same vendor or product family, Red.

2. CVE-2012-60950.716
   ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary…

   Related weakness classes, CWE-362 is above CWE-363.

3. CVE-2026-912020.794
   Cockpit-files: cockpit-files: arbitrary file ownership change via symlink following in privileged paste

   Same vendor or product family, Red.

4. CVE-2026-684880.683
   A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local…

   Related weakness classes, CWE-367 is above CWE-363.

5. CVE-2017-180180.709
   In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a…

   Related weakness classes, CWE-362 is above CWE-363.

6. CVE-2008-16140.714
   suPHP before 0.6.3 allows local users to gain privileges via (1) a race condition that involves multiple symlink…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

7. CVE-2010-04390.679
   Chip Salzenberg Deliver allows local users to cause a denial of service, obtain sensitive information, and possibly…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

8. CVE-2000-08640.694
   Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change…

   Related weakness classes, CWE-362 is above CWE-363.

9. CVE-2023-281440.660
   KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race…

   Related weakness classes, CWE-362 is above CWE-363.

10. CVE-2009-17530.661
    Coccinelle 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on an unspecified "result file."

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.