CWE-524 · 72 records
Use of Cache Containing Sensitive Information
CVEs in this class
72 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
38Monitor | CVE-2026-53943No exploit | Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview headertryghost · ghost · CWE-524 | Critical9.6 | — | 0.4% | Jun 24, 2026 |
36Monitor | CVE-2026-19202No exploit | Token Cache Reuse in mcp-toolbox-sdk-pythongoogle · mcp-toolbox-sdk-python · CWE-524 | Critical9.1 | — | 0.2% | Sep 22, 2026 |
34Monitor | CVE-2026-93748No exploit | http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stalekornelski · http-cache-semantics · CWE-524 | High8.7 | — | 0.5% | Sep 18, 2026 |
34Monitor | CVE-2026-61836No exploit | Directus: Authorization-dependent response served from unsegmented cache keymonospace · directus · CWE-524 | High8.6 | — | 0.4% | Jul 15, 2026 |
32Monitor | CVE-2026-50170No exploit | Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCacheangular · angular · CWE-524 | High8.2 | — | 0.4% | Jun 22, 2026 |
32Monitor | CVE-2025-64762No exploit | authkit-nextjs may let session cookies be cached in CDNsworkos · authkit-nextjs · CWE-524 | High8.0 | — | 0.3% | Nov 21, 2025 |
31Monitor | CVE-2021-24027Proof of concept | A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third pwhatsapp · whatsapp · CWE-524 | High7.5 | — | 3.8% | Apr 6, 2021 |
30Monitor | CVE-2024-27917No exploit | Shopware's session is persistent in Cache for 404 pagesshopware · shopware · CWE-524 | High7.5 | — | 0.6% | Mar 6, 2024 |
30Monitor | CVE-2023-37486No exploit | Information Disclosure vulnerability in SAP Commerce (OCC API)sap · commerce cloud · CWE-524 | High7.5 | — | 0.5% | Aug 7, 2023 |
30Monitor | CVE-2026-71316No exploit | Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clientsnuxt · nuxt · CWE-524 | High7.5 | — | 0.5% | Aug 5, 2026 |
30Monitor | CVE-2026-108088No exploit | Apache Cocoon: Cross-user cache poisoningapache software foundation · apache cocoon · CWE-524 | High7.5 | — | 0.4% | Oct 20, 2026 |
30Monitor | CVE-2023-45696No exploit | HCL Sametime is impacted by an autocomplete enabled vulnerabilityhcltech · sametime · CWE-524 | High7.5 | — | 0.4% | Feb 9, 2024 |
30Monitor | CVE-2026-64792No exploit | Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensionsregularlabs.com · articles anywhere extension for joomla · CWE-524 | High7.5 | — | 0.4% | Jul 22, 2026 |
30Monitor | CVE-2026-65755No exploit | Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extensionregularlabs.com · articles anywhere extension for joomla · CWE-524 | High7.5 | — | 0.4% | Jul 23, 2026 |
30Monitor | CVE-2026-59903Proof of concept | Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwritenetty · netty · CWE-524 | High7.5 | — | 0.3% | Aug 17, 2026 |
30Monitor | CVE-2026-48901No exploit | Joomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objectsjoomla · joomla\! · CWE-524 | High7.5 | — | 0.2% | May 26, 2026 |
30Monitor | CVE-2023-37517No exploit | HCL Domino Volt and Domino Leap are affected by missing "no cache" headershcltech · domino leap · CWE-524 | High7.5 | — | 0.2% | Apr 30, 2025 |
28Monitor | CVE-2024-12314No exploit | Rapid Cache <= 1.2.3 - Unauthenticated Cache Poisoningmegaoptim · rapid cache · CWE-524 | High7.2 | — | 0.3% | Feb 18, 2025 |
26Monitor | CVE-2024-45596No exploit | Directus's session is cached for OpenID and OAuth2 if `redirect` is not usedmonospace · directus · CWE-524 | Medium6.5 | — | 0.6% | Sep 10, 2024 |
26Monitor | CVE-2026-25540No exploit | Mastodon's signature-dependent ActivityPub collection responses cached under signature-independent keys (Web Cache Poisoning via `Rails.cache`)joinmastodon · mastodon · CWE-524 | Medium6.5 | — | 0.4% | Feb 4, 2026 |
25Monitor | CVE-2026-82755No exploit | ash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusionash-project · ash_authentication_oauth2_server · CWE-524 | Medium6.3 | — | 0.6% | Sep 7, 2026 |
25Monitor | CVE-2026-89186No exploit | mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared cacheszenhive · mpp · CWE-524 | Medium6.3 | — | 0.5% | Sep 16, 2026 |
25Monitor | CVE-2026-94543No exploit | Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applicationsvercel · next.js · CWE-524 | Medium6.3 | — | 0.5% | Oct 2, 2026 |
25Monitor | CVE-2025-61598No exploit | Discourse is missing Cache-Control response header on error responsesdiscourse · discourse · CWE-524 | Medium6.3 | — | 0.3% | Oct 28, 2025 |
25Monitor | CVE-2026-103004No exploit | next.js cache leak on warm `use cache` handlers accessing root paramvercel · next.js · CWE-524 | Medium6.3 | — | 0.2% | Oct 1, 2026 |
- CVE-2026-5394338Monitor
Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header
CriticalCVSS 9.6No exploitEPSS 0%tryghost · ghostJun 24, 2026
- CVE-2026-1920236Monitor
Token Cache Reuse in mcp-toolbox-sdk-python
CriticalCVSS 9.1No exploitEPSS 0%google · mcp-toolbox-sdk-pythonSep 22, 2026
- CVE-2026-9374834Monitor
http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale
HighCVSS 8.7No exploitEPSS 0%kornelski · http-cache-semanticsSep 18, 2026
- CVE-2026-6183634Monitor
Directus: Authorization-dependent response served from unsegmented cache key
HighCVSS 8.6No exploitEPSS 0%monospace · directusJul 15, 2026
- CVE-2026-5017032Monitor
Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache
HighCVSS 8.2No exploitEPSS 0%angular · angularJun 22, 2026
- CVE-2025-6476232Monitor
authkit-nextjs may let session cookies be cached in CDNs
HighCVSS 8.0No exploitEPSS 0%workos · authkit-nextjsNov 21, 2025
- CVE-2021-2402731Monitor
A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third p
HighCVSS 7.5Proof of conceptEPSS 3%whatsapp · whatsappApr 6, 2021
- CVE-2024-2791730Monitor
Shopware's session is persistent in Cache for 404 pages
HighCVSS 7.5No exploitEPSS 0%shopware · shopwareMar 6, 2024
- CVE-2023-3748630Monitor
Information Disclosure vulnerability in SAP Commerce (OCC API)
HighCVSS 7.5No exploitEPSS 0%sap · commerce cloudAug 7, 2023
- CVE-2026-7131630Monitor
Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients
HighCVSS 7.5No exploitEPSS 0%nuxt · nuxtAug 5, 2026
- CVE-2026-10808830Monitor
Apache Cocoon: Cross-user cache poisoning
HighCVSS 7.5No exploitEPSS 0%apache software foundation · apache cocoonOct 20, 2026
- CVE-2023-4569630Monitor
HCL Sametime is impacted by an autocomplete enabled vulnerability
HighCVSS 7.5No exploitEPSS 0%hcltech · sametimeFeb 9, 2024
- CVE-2026-6479230Monitor
Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions
HighCVSS 7.5No exploitEPSS 0%regularlabs.com · articles anywhere extension for joomlaJul 22, 2026
- CVE-2026-6575530Monitor
Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension
HighCVSS 7.5No exploitEPSS 0%regularlabs.com · articles anywhere extension for joomlaJul 23, 2026
- CVE-2026-5990330Monitor
Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite
HighCVSS 7.5Proof of conceptEPSS 0%netty · nettyAug 17, 2026
- CVE-2026-4890130Monitor
Joomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objects
HighCVSS 7.5No exploitEPSS 0%joomla · joomla\!May 26, 2026
- CVE-2023-3751730Monitor
HCL Domino Volt and Domino Leap are affected by missing "no cache" headers
HighCVSS 7.5No exploitEPSS 0%hcltech · domino leapApr 30, 2025
- CVE-2024-1231428Monitor
Rapid Cache <= 1.2.3 - Unauthenticated Cache Poisoning
HighCVSS 7.2No exploitEPSS 0%megaoptim · rapid cacheFeb 18, 2025
- CVE-2024-4559626Monitor
Directus's session is cached for OpenID and OAuth2 if `redirect` is not used
MediumCVSS 6.5No exploitEPSS 0%monospace · directusSep 10, 2024
- CVE-2026-2554026Monitor
Mastodon's signature-dependent ActivityPub collection responses cached under signature-independent keys (Web Cache Poisoning via `Rails.cache`)
MediumCVSS 6.5No exploitEPSS 0%joinmastodon · mastodonFeb 4, 2026
- CVE-2026-8275525Monitor
ash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusion
MediumCVSS 6.3No exploitEPSS 0%ash-project · ash_authentication_oauth2_serverSep 7, 2026
- CVE-2026-8918625Monitor
mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared caches
MediumCVSS 6.3No exploitEPSS 0%zenhive · mppSep 16, 2026
- CVE-2026-9454325Monitor
Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications
MediumCVSS 6.3No exploitEPSS 0%vercel · next.jsOct 2, 2026
- CVE-2025-6159825Monitor
Discourse is missing Cache-Control response header on error responses
MediumCVSS 6.3No exploitEPSS 0%discourse · discourseOct 28, 2025
- CVE-2026-10300425Monitor
next.js cache leak on warm `use cache` handlers accessing root param
MediumCVSS 6.3No exploitEPSS 0%vercel · next.jsOct 1, 2026