CVE-2026-114542
NoneCVSS
—
EPSS
—
Published
Oct 30, 2026
CISA due date
—
The record
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) & OpenID Connect versions: from 6.1.0 to 6.1.3.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-118571 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media… CWE-525
- CVE-2026-118550 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI… CWE-525
- CVE-2026-114548 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal… CWE-525
- CVE-2026-114546 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media… CWE-525
- CVE-2026-96369 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform… CWE-525
- CVE-2026-87940 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key… CWE-525
- CVE-2026-13697 undici's cache interceptor mishandles malformed Cache-Control private directives. CWE-525
- CVE-2026-41918 A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions <… CWE-525