PULSE
ESEN
FEED
ransomqilin reclama a Oak Green School · GB · Educationransomqilin reclama a Gandol Doors · TR · Manufacturingransomqilin reclama a Amber Management Ltd · GB · Otherransomrhysida reclama a Tribunal de Justica do Estado de Minas Gerais · BR · Government & Defenseransompayload reclama a Autohaus Arnold · DE · Retail & E-Commerceransompayload reclama a Braucoransompayload reclama a Schroers Ingenieure · DE · Professional Servicesransompayload reclama a Otto Stops · Transportationransommetaencryptor reclama a Christie Digital Systems · US · Technologyransommetaencryptor reclama a Daeah E&C · KR · Manufacturingransommetaencryptor reclama a DAEWON Chemical · KR · Manufacturingransommetaencryptor reclama a Wooshin Systems · KR · Technologyransommetaencryptor reclama a Proterial America, Ltd. · US · Manufacturingransommetaencryptor reclama a Hyundai E&C · KR · Manufacturingransomqilin reclama a Oak Green School · GB · Educationransomqilin reclama a Gandol Doors · TR · Manufacturingransomqilin reclama a Amber Management Ltd · GB · Otherransomrhysida reclama a Tribunal de Justica do Estado de Minas Gerais · BR · Government & Defenseransompayload reclama a Autohaus Arnold · DE · Retail & E-Commerceransompayload reclama a Braucoransompayload reclama a Schroers Ingenieure · DE · Professional Servicesransompayload reclama a Otto Stops · Transportationransommetaencryptor reclama a Christie Digital Systems · US · Technologyransommetaencryptor reclama a Daeah E&C · KR · Manufacturingransommetaencryptor reclama a DAEWON Chemical · KR · Manufacturingransommetaencryptor reclama a Wooshin Systems · KR · Technologyransommetaencryptor reclama a Proterial America, Ltd. · US · Manufacturingransommetaencryptor reclama a Hyundai E&C · KR · Manufacturing
← Todos os CVEs
CVE Watch6 de nov. de 2026

CVE-2026-114548

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Confi

CVSS

3.7

Baixa

EPSS

0.1%

p4

KEV

—

Exploit Today

1

0-100

Publicado: 30 de out. de 2026 · Última mod.: 6 de nov. de 2026 · CWE-525

EPSS · 30d
0.1%EPSS · 30 dias0.1%
2026-10-302026-11-06
Descrição técnica

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2.

Referências oficiais
CVEs relacionados
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1185715.9 MÉD
3.4%
——1Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.3, from 3.0.0 to 3.0.3.1dCVE-2026-1185505.9 MÉD
8.7%
——3Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.1dCVE-2026-1145463.7 BAI
4.2%
——1Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2.1dCVE-2026-1145425.4 MÉD
4.2%
——1Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) & OpenID Connect versions: from 6.1.0 to 6.1.3.1dCVE-2026-96369—
11.1%
——3Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.17dCVE-2026-87940—
14.1%
——4Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Key auth versions: from 0.0.0 to 2.2.4.17d