CVE-2026-108088

** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the cache on a multi-user application, cached values for one user could be used when serving content for other users. This issue affects Apache Cocoon: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-524

• https://lists.apache.org/thread/30vg3mht5vsm9vsmrdnx80zp5fw536st
• https://www.openwall.com/lists/oss-security/2026/10/20/4

Published

Oct 20, 2026

Last Modified

Oct 20, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-108072Vulnerability due to incorrect permissions in TSplus Remote …5.4
• CVE-2026-108073The SureCart WordPress plugin before 4.9.5 does not restric…5.3
• CVE-2026-10808A vulnerability was identified in itsourcecode Fees Manageme…6.3
• CVE-2026-108082Symfony is a PHP framework for web and console applications …8.7
• CVE-2026-108086** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recu…
• CVE-2026-108087** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of s…
• CVE-2026-108089** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system…7.5
• CVE-2026-10809A security flaw has been discovered in itsourcecode Fees Man…6.3
• CVE-2026-108092The Blog2Social – Social Media Auto Post & Scheduler plugin …4.3
• CVE-2026-108093A flaw was found in GIMP. The XCF loader processes image-sim…5.5
• CVE-2026-108094A use-after-free flaw was found in mutter in the Wayland col…7.8
• CVE-2026-108096Improper authorization in the query resolvers generated by @…6.5