CVE-2026-87940

Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138 PUBLISHED

Description (CNA)

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Key auth versions: from 0.0.0 to 2.2.4.

Affected (CNA)

Vendor / product	Versions
Drupal / Key auth	affected 0.0.0 before 2.2.4

CWE

CWE-525

References

https://www.drupal.org/sa-contrib-2026-138

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.