CVE-2026-114542
Received Received - Intake

Web Browser Cache Sensitive Data Exposure in Drupal Simple OAuth

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: Drupal.org

Description
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) & OpenID Connect versions: from 6.1.0 to 6.1.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-114542
EUVD
EUVD-2026-113530

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Drupal Simple OAuth (OAuth2) & OpenID Connect 6.1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-525 The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves sensitive information being stored in a web browser's cache due to incorrectly configured access control security levels in Drupal Simple OAuth and OpenID Connect modules. It affects versions 6.1.0 to 6.1.3.

Impact Analysis

An attacker could exploit this to access cached sensitive data, potentially leading to unauthorized access to user credentials or other confidential information stored in the browser cache.

Compliance Impact

This vulnerability could lead to unauthorized exposure of personal data, violating GDPR and HIPAA compliance requirements for data protection and confidentiality.

Mitigation Strategies

Immediately upgrade Simple OAuth (OAuth2) & OpenID Connect to a version outside the affected range (6.1.0 to 6.1.3). Review and correct access control security levels to ensure sensitive information is not cached inappropriately.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-114542. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart