CVE-2026-4405
Medium · 4.0CVSS
4.0
EPSS
0.1%
Published
Oct 19, 2026
CISA due date
—
The record
IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-118571 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media… CWE-525
- CVE-2026-118550 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI… CWE-525
- CVE-2026-114548 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal… CWE-525
- CVE-2026-114546 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media… CWE-525
- CVE-2026-114542 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple… CWE-525
- CVE-2026-96369 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform… CWE-525
- CVE-2026-87940 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key… CWE-525
- CVE-2026-13697 undici's cache interceptor mishandles malformed Cache-Control private directives. CWE-525