CWE-524

CVEs per yearBy the year they were published

1. 20194
2. 20211
3. 20223
4. 20231
5. 20247
6. 202514
7. 202659

Newest CVEs

• CVE-2026-115710

  Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure

  Elastic · Elasticsearch

  Medium4.2
• CVE-2026-113593

  Potential exposure of private data via empty and missing Vary headers

  djangoproject · Django

  Low2.3
• CVE-2026-118489

  CachingWebClient shares user-specific HTTP responses across users via the shared cache tier

  Eclipse Foundation · Eclipse Vert.x

  High7.5
• CVE-2026-111464

  WP Fastest Cache <= 1.5.3 - Unauthenticated Sensitive Information Exposure via Cached wp-activate.php Response

  emrevona · WP Fastest Cache – WordPress Cache Plugin

  Medium5.9
• CVE-2026-109217

  PDF Invoices & Packing Slips for WooCommerce <= 5.16.5 - Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment Cache

  wpovernight · PDF Invoices & Packing Slips for WooCommerce

  Medium5.3
• CVE-2026-94386

  Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache

  Apache Software Foundation · Apache Camel

  Medium4.8
• CVE-2026-105711

  Use of Cache Containing Sensitive Information in GitLab

  GitLab · GitLab

  Low3.5
• CVE-2026-108088

  Apache Cocoon: Cross-user cache poisoning

  Apache Software Foundation · Apache Cocoon

  High7.5
• CVE-2026-85317

  Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache

  Apache Software Foundation · Apache Camel

  Medium4.8
• CVE-2026-109829

  undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects

  undici · undici

  High7.4

Vendors it comes up for most

1. vercel6
2. HCL Software4
3. angular4
4. djangoproject4
5. undici4
6. Apache Software Foundation3
7. Apple2
8. Palo Alto Networks2
9. Red Hat2
10. SAP_SE2