CVE-2026-96369

The record

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

Affected packages

Related vulnerabilities

• CVE-2026-87940 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key… CWE-525
• CVE-2026-13697 undici's cache interceptor mishandles malformed Cache-Control private directives. CWE-525
• CVE-2026-41918 A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions <… CWE-525
• CVE-2026-41322 @astrojs/node allows Astro to deploy your SSR site to Node targets. CWE-525
• GHSA-c57f-mm3j-27q9 Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed CWE-525
• CVE-2025-15554 Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an… CWE-525
• CVE-2025-36364 IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can… CWE-525
• CVE-2026-27514 Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a sensitive… CWE-525