← العودة للجدول
CVE-2026-8404
CVE-2026-8404 — GHSA: An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware...
📅 2026-06-03
🟢 Low 🔥 No GHSA Exploit Vulnerability CVSS 3.1

📋 الوصف الكامل

An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware` in Django does not match `Cache-Control` response directives case-insensitively, which allows remote attackers to read responses that were incorrectly cached because their `Cache-Control` directives used uppercase or mixed-case values. Earlier, unsupported Django series (such a

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-8404

📡 المصدر

GHSA

✅ الحلول والتخفيف

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←