CVE-2026-94652 · Brief

CVEs like CVE-2026-94652

The records whose text reads closest to CVE-2026-94652, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-939260.842
   Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path

   Same weakness class, CWE-401; same vendor or product family, Apache.

2. CVE-2026-946510.724
   Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error

   Same vendor or product family, Apache.

3. CVE-2026-928340.718
   Apache Thrift: C++ WebSocket server transport does not read a full request length

   Same vendor or product family, Apache.

4. CVE-2026-865370.680
   Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to…

   Same vendor or product family, Apache.

5. CVE-2026-836320.728
   Apache Thrift: C++ THttpTransport grows its line buffer without bound

   Same vendor or product family, Apache.

6. CVE-2026-946420.685
   Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception

   Same vendor or product family, Apache.

7. CVE-2026-559700.676
   Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()

   Same vendor or product family, Apache.

8. CVE-2026-559710.726
   Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()

   Same vendor or product family, Apache.

9. CVE-2026-416070.698
   Apache Thrift: C++ JSON OOB read

   Same vendor or product family, Apache.

10. CVE-2026-962770.657
    Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception

    Same vendor or product family, Apache.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.