Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-87940

Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138

Description

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Key auth versions: from 0.0.0 to 2.2.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Drupal Key auth

  • 0.0.0 to < 2.2.4affected

References