Topic

Cache Poisoning: news, advisories and analysis

4 articlesUpdated 11 Oct 2026

CyberSecureToday covers Cache Poisoning across 4 articles published between 15 Sep 2026 and 11 Oct 2026. The coverage includes 4 vulnerability advisories. 4 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Cache Poisoning most often intersect with Cloudflare, CDN Security and Web Security, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Cloudflare Workers KV Cache Poisoning Flaw Enables Edge Response Tampering and Malicious Script Injection (CVE-2026-73190)”, was published 11 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Cloudflare Workers KV Cache Poisoning Flaw Enables Edge Response Tampering and Malicious Script Injection (CVE-2026-73190)
Cloudflare resolves critical vulnerability CVE-2026-73190 in Workers KV edge caching, where HTTP Range header normalization flaws allowed global cache poisoning.
CST Editorial Desk11 Oct 20268 min read
ThreatsCloud & SaaSCritical
Apache Traffic Server Flaw Enables Cache Poisoning and Access Control Bypass Across Cloud CDNs (CVE-2026-102795)
A critical HTTP header smuggling and cache poisoning vulnerability in Apache Traffic Server allows attackers to bypass ACLs and serve poisoned content globally.
CST Editorial Desk1 Oct 202610 min read
ThreatsCloud & SaaSHigh
OpenNext Cloudflare Adapter Flaw Enables Server-Side Request Forgery and Private Cache Disclosure CVE-2026-3125
Cloudflare and OpenNext patch high-severity flaw CVE-2026-3125, where path normalization bypasses allow attackers to trigger SSRF and extract private Next.js cache assets.
CST Editorial Desk22 Sep 202615 min read
ThreatsCloud & SaaSCritical
JFrog Artifactory Path Traversal Flaw Enables Remote Cache Poisoning & Supply Chain Attacks
CISA adds CVE-2026-66384 to its KEV catalog, warning that path traversal in JFrog Artifactory allows remote adversaries to overwrite Docker layers and poison enterprise build pipelines.
Priya Raman15 Sep 20268 min read

Latest coverage

Cloudflare Workers KV Cache Poisoning Flaw Enables Edge Response Tampering and Malicious Script Injection (CVE-2026-73190)

Apache Traffic Server Flaw Enables Cache Poisoning and Access Control Bypass Across Cloud CDNs (CVE-2026-102795)

OpenNext Cloudflare Adapter Flaw Enables Server-Side Request Forgery and Private Cache Disclosure CVE-2026-3125

JFrog Artifactory Path Traversal Flaw Enables Remote Cache Poisoning & Supply Chain Attacks