CVEs like CVE-2026-94000

The records whose text reads closest to CVE-2026-94000, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

CVE-2026-90990.844
Keycloak: group-admin escalation to realm-admin
Same vendor or product family, Red.
CVE-2026-97960.709
Keycloak: keycloak: privilege escalation via time-of-check to time-of-use (toctou) vulnerability
Same vendor or product family, Red.
CVE-2026-411660.695
OpenRemote has Improper Access Control via updateUserRealmRoles function
Related weakness classes, CWE-284 is above CWE-862.
CVE-2026-964480.765
Keycloak-services: keycloak-services: fgap v2 composite-blind role mapping allows privilege escalation
Related weakness classes, CWE-285 is above CWE-862; same vendor or product family, Red.
CVE-2025-77840.760
Org.keycloak/keycloak-services: privilege escalation in keycloak admin console (fgapv2 enabled)
Same vendor or product family, Red.
CVE-2026-31210.760
Keycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permission
Same vendor or product family, Red.
CVE-2026-175260.792
Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm…
Same weakness class, CWE-862 (missing authorization); same vendor or product family, Red.
CVE-2026-123880.718
Keycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider…
Same vendor or product family, Red.
CVE-2026-90880.741
Keycloak: keycloak: information disclosure due to user profile permission bypass
Same vendor or product family, Red.
CVE-2026-182030.774
Keycloak-services: keycloak-services: group policy extendchildren matches sibling group path prefixes
Sibling weakness classes under CWE-285, CWE-862 and CWE-863; same vendor or product family, Red.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.