CVE-2026-41918

The record

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when an authenticated user modify specific configurations. This could allow an authenticated attacker to access sensitive data stored in the browser.

Affected packages

Related vulnerabilities

• CVE-2026-96369 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform… CWE-525
• CVE-2026-87940 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key… CWE-525
• CVE-2026-13697 undici's cache interceptor mishandles malformed Cache-Control private directives. CWE-525
• CVE-2026-41322 @astrojs/node allows Astro to deploy your SSR site to Node targets. CWE-525
• GHSA-c57f-mm3j-27q9 Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed CWE-525
• CVE-2025-15554 Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an… CWE-525
• CVE-2025-36364 IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can… CWE-525
• CVE-2026-27514 Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a sensitive… CWE-525