CVE-2026-8404

score

<0.1

cvss

3.1

epss

0.4%

published

2026-06-03

kev added

—

first seen

2026-10-21

Django 5.2 < 5.2.15 and 6.0 < 6.0.6 contain a cache control case sensitivity issue in django.middleware.cache.UpdateCacheMiddleware, letting remote attackers read incorrectly cached responses due to case-sensitive Cache-Control directives, exploit requires no special privileges.