vciy

CVE-2026-9138 · Brief

CVEs like CVE-2026-9138

The records whose text reads closest to CVE-2026-9138, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

  1. CVE-2026-88590.832
    Path Traversal in APIRequest Component via Content-Disposition Header

    Same weakness class, CWE-22 (path traversal); same vendor or product family, IBM.

  2. CVE-2025-684780.808
    Langflow Vulnerable to External Control of File Name or Path

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  3. CVE-2026-193030.931
    Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing…

    Same weakness class, CWE-22 (path traversal); same vendor or product family, IBM.

  4. CVE-2026-76670.837
    Path Traversal Vulnerability in API Request Component Content-Disposition Header Processing

    Same weakness class, CWE-22 (path traversal); same vendor or product family, IBM.

  5. CVE-2026-193020.834
    Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and…

    Same weakness class, CWE-22 (path traversal); same vendor or product family, IBM.

  6. CVE-2026-333090.837
    Langflow has an Arbitrary File Write (RCE) via v2 API

    Same weakness class, CWE-22 (path traversal).

  7. CVE-2026-848890.838
    A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to…

    Same weakness class, CWE-22 (path traversal); same vendor or product family, IBM.

  8. CVE-2026-192990.837
    Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and…

    Same weakness class, CWE-22 (path traversal); same vendor or product family, IBM.

  9. CVE-2026-45020.873
    Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API

    Same weakness class, CWE-22 (path traversal); same vendor or product family, IBM.

  10. CVE-2026-75240.796
    Path Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote…

    Same weakness class, CWE-22 (path traversal); same vendor or product family, IBM.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.