Question 1

What is CVE-2026-92442 — CVE-2026-92442?

Accepted Answer

The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to another.

Question 2

What is the authoritative source for CVE-2026-92442?

Accepted Answer

CVE-2026-92442 (CVE-2026-92442) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-92442CVE-2026-92442

Description

Scoring