CVE-2026-92138 · Brief

CVEs like CVE-2026-92138

The records whose text reads closest to CVE-2026-92138, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2020-132720.694
   OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth…

   Same weakness class, CWE-345.

2. CVE-2022-281330.789
   Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth…

   Same vendor or product family, Jenkins.

3. CVE-2026-912010.693
   DocsGPT through 0.20.0 OAuth Token Disclosure via Wildcard postMessage

   Related weakness classes, CWE-345 is above CWE-346.

4. CVE-2023-244280.768
   A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers…

   Related weakness classes, CWE-345 is above CWE-352; same vendor or product family, Jenkins.

5. CVE-2025-641490.702
   A cross-site request forgery (CSRF) vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows…

   Related weakness classes, CWE-345 is above CWE-352; same vendor or product family, Jenkins.

6. CVE-2025-243980.719
   Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that…

   Related weakness classes, CWE-345 is above CWE-352; same vendor or product family, Jenkins.

7. CVE-2024-394600.754
   Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of…

   Same vendor or product family, Jenkins.

8. CVE-2023-244270.768
   Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login.

   Same vendor or product family, Jenkins.

9. CVE-2022-281340.742
   Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP…

   Same vendor or product family, Jenkins.

10. CVE-2022-206190.696
    A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and…

    Related weakness classes, CWE-345 is above CWE-352; same vendor or product family, Jenkins.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.