CVE-2026-123041 - CERT CVE

  1. CVE-2026-123041

ID CVE-2026-123041
Sažetak The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key, allowing a cached callout response for a caller to be served to another.
Reference
CVSS
Base: 0.0
Impact: None
Exploitability:None
Pristup
VektorSloženostAutentikacija
None None None
Impact
PovjerljivostCjelovitostDostupnost
None None None
CVSS vektor None
Zadnje važnije ažuriranje 13-11-2026 - 14:17
Objavljeno 10-11-2026 - 22:18