CVE-2026-48588

score

<0.1

cvss

3.1

epss

0.4%

published

2026-07-07

kev added

—

first seen

2026-10-21

Django 6.0 < 6.0.7 and 5.2 < 5.2.16 contain an information disclosure vulnerability caused by caching responses that vary on cookies with unrelated cookies, letting remote attackers read private data from shared cache, exploit requires crafted requests with unrelated cookies.