Stats Digest Feeds
โ† Back to all CVEs

CVE-2026-92558

UNKNOWN NVD
CVSS Score 0
Severity UNKNOWN
Published Nov 10, 2026
Vendor unknown

Description

The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when building the cache key, allowing a remote attacker to cause a response cached for one request to be served for a different request on the same Route.

References