CVE-2026-114542
Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) & OpenID Connect versions: from 6.1.0 to 6.1.3.
| CWE | CWE-525 |
| Vendor | drupal |
| Product | simple oauth (oauth2) & openid connect |
| Ecosystems | |
| Industries | WebMedia |
| Published | Oct 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for drupal simple oauth (oauth2) & openid connect
Be the first to know when new unknown vulnerabilities affecting drupal simple oauth (oauth2) & openid connect are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Drupal / Simple OAuth (OAuth2) & OpenID Connect
6.1.0 < 6.1.3
Credits
Jonathan Shaw (jonathanshaw) Alexander Varwijk (kingdutch) Mingsong (mingsong) Stephan Huber (stmh) Trevor Bradley (trevorbradley) Bojan Bogdanovic (bojan_dev) Alexander Varwijk (kingdutch) Mingsong (mingsong) Trevor Bradley (trevorbradley) Jonathan Shaw (jonathanshaw) Swan Kalata (akalata) Benji Fisher (benjifisher) Damien McKenna (damienmckenna) Neil Drumm (drumm) Juraj Nemec (poker10)