{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "6.1.0"
                  },
                  {
                    "fixed": "6.1.3"
                  }
                ],
                "source": "AFFECTED_FIELD",
                "strategy": "StandardRange"
              }
            ]
          },
          "events": [
            {
              "introduced": "051a4ec8182538887da3748107ba7cf65a9d4612"
            },
            {
              "fixed": "40cbf1eb51be3794663ca9ec742bd46575c5b909"
            }
          ],
          "repo": "https://git.drupalcode.org/project/simple_oauth",
          "type": "GIT"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "drupal",
    "cwe_ids": [
      "CWE-525"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114542.json"
  },
  "details": "Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) \u0026 OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) \u0026 OpenID Connect versions: from 6.1.0 to 6.1.3.",
  "id": "CVE-2026-114542",
  "modified": "2026-11-08T02:31:09.407866478Z",
  "published": "2026-10-30T03:09:26.573Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.drupalcode.org/project/simple_oauth"
    },
    {
      "type": "WEB",
      "url": "https://www.drupal.org/project/simple_oauth"
    },
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2026-242"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114542.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114542"
    }
  ],
  "schema_version": "1.9.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Simple OAuth (OAuth2) \u0026 OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242"
}