CVE-2026-14441

A logic flaw in the Java cache key handling of Brocade SANnav allows for improper identifier resolution when processing specific user account structures. This vulnerability exists in SANnav versions before 3.0.1a . The issue has been remediated by updating the internal comparison routines to ensu...

CVE-2026-14441 Logic flaw in SANnav Java cache key handling object comparison handling

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

EUVD-2026-86470

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

CVE-2026-14441: Comparison Using Wrong Factors

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

PT-2026-98304

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic flaw in Java cache key handling object comparison could lead to improper identifier resolution when processing specific user account structures. This iss...

Logic flaw in Brocade SANnav Java cache key handling object comparison handling

A logic flaw in Brocade SANnav Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and...

WordPress APCu Manager plugin < 4.5.0 - Unauthenticated Stored XSS via Cache Key Pollution vulnerability

Unauthenticated Stored XSS via Cache Key Pollution vulnerability discovered by Alessandro Greco aka Aleff, Giovanbattista Ianni University of Calabria - UNICAL in WordPress Plugin APCu Manager versions 4.5.0...

grafana: Grafana: Session takeover via Auth Proxy cache key collision

On instances using Auth Proxy header authentication auth.proxy with identity caching enabled syncttl 0, two distinct user identities could produce the same cache key. An authenticated low-privileged user able to influence their own forwarded identity attributes could be served a higher-privileged...

CVE-2026-79713

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

CVE-2026-79713: Inconsistent Interpretation of HTTP Requests

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from...

Linux Distros Unpatched Vulnerability : CVE-2026-90102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4/pnfs: key the data server cache on the NFS version nfs4pnfsdsadd keys the per-net data server cache on the multipath address set alone, and struct...

CVE-2026-90102: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4pnfsdsadd keys the per-net data server cache on the multipath address set alone, and struct nfs4pnfsds records no version. That suffices for the files layout driver,...

CVE-2026-92133

Jenkins GitLab Plugin 1.2149.vcfc32c82bf7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure...

CVE-2026-92133

Jenkins GitLab Plugin 1.2149.vcfc32c82bf7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure...

CVE-2026-92133

Jenkins GitLab Plugin 1.2149.vcfc32c82bf7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure...

CVE-2026-92133

The Jenkins GitLab Plugin (version 1.2149.vcfc32c82b_f7f and earlier) is vulnerable to a cache confusion issue. The plugin caches the GitLab API client for alternative credentials using a cache key derived solely from the credentials ID, failing to include the folder path where the credentials ar...

PT-2026-93776

Name of the Vulnerable Software and Affected Versions Jenkins GitLab Plugin versions prior to 1.2149.vcfc32c82b f7f Description The plugin caches the GitLab API client for alternative GitLab API token credentials using a cache key based solely on the credentials ID, failing to include the folder...

PT-2026-93900

Name of the Vulnerable Software and Affected Versions oRPC versions prior to 1.14.8 Description The CORS plugin in the @orpc/server package, specifically within packages/server/src/plugins/cors.ts, incorrectly copies the Vary request header from the client directly into the response. The Vary...

CVE-2026-12763

IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server context due to improper cache key isolation in the MCP Tools component...

CVE-2026-12763

IBM Langflow OSS (versions 1.0.0 through 1.11.5) is affected by improper cache key isolation in the MCP Tools component . The component caches discovered MCP tools in a shared process-local cache keyed only by the MCP server display name, without incorporating the user, session, flow, or resolved...