{"id":"CVE-2026-92545","aliases":[],"cve":{"records":[{"id":"CVE-2026-92545","source":"Kong","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-16T13:01:33.075Z","published":"2026-11-10T21:23:34.313Z","modified":"2026-11-13T14:37:39.362Z"}],"publishers":[{"name":"Kong","role":"CNA","organizationId":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","modified":"2026-11-10T21:23:34.313Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-13T14:37:39.362Z"}],"references":[{"url":"https://developer.konghq.com/gateway/changelog/","tags":["release-notes"],"source":"Kong"},{"url":"https://developer.konghq.com/ai-gateway/changelog/","tags":["release-notes"],"source":"Kong"}],"weaknesses":[{"id":"CWE-524","description":"CWE-524 Use of Cache Containing Sensitive Information","source":"Kong"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-13T14:37:03.824963Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow…","titleSource":"Kong","descriptionSource":"Kong","description":"The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a response cached for a hostname to be served for another.","score":8.7,"severity":"high","published":"2026-11-10T21:23:34.313Z","modified":"2026-11-13T14:37:39.362Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Kong Inc.","name":"Kong Gateway Enterprise","platforms":[],"versions":[{"version":"3.10.0.0","status":"affected","lessThan":"3.10.0.20","versionType":"custom"},{"version":"3.13.0.0","status":"affected","lessThan":"3.13.0.12","versionType":"custom"},{"version":"3.14.0.0","status":"affected","lessThan":"3.14.0.17","versionType":"custom"},{"version":"3.15.0.0","status":"affected","lessThan":"3.15.0.7","versionType":"custom"},{"version":"3.16.0.0","status":"affected","lessThan":"3.16.0.2","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"Kong","url":"https://www.cve.org/CVERecord?id=CVE-2026-92545"},{"vendor":"Kong Inc.","name":"Kong AI Gateway","platforms":[],"versions":[{"version":"2.2.0","status":"affected","lessThan":"2.2.1","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"Kong","url":"https://www.cve.org/CVERecord?id=CVE-2026-92545"}],"remediation":[],"references":["https://developer.konghq.com/gateway/changelog/","https://developer.konghq.com/ai-gateway/changelog/"],"sources":[{"name":"CVE","id":"CVE-2026-92545","modified":"2026-11-13T14:37:39.362Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-92545"}],"assessments":[{"source":"Kong","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","score":8.7}],"sourceAffected":[],"observedAt":"2026-11-13T20:40:59.094Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T00:00:32.242Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-11-14T07:00:32.343Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-14T06:50:34.651Z","attemptedAt":"2026-11-14T06:50:34.651Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-14T06:45:38.306Z","attemptedAt":"2026-11-14T06:45:38.306Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-14T06:45:37.047Z","attemptedAt":"2026-11-14T06:45:37.047Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-92545","url":"https://www.first.org/epss/","probability":0.00361,"percentile":0.30301,"date":"2026-11-13","checkedAt":"2026-11-14T06:45:37.047Z"},{"source":"ENISA EUVD","id":"EUVD-2026-122960","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-122960","modified":"Nov 13, 2026, 2:37:39 PM","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","checkedAt":"2026-11-14T06:45:38.306Z"},{"source":"GitHub Advisory Database","id":"GHSA-cfcv-hfxc-g2rj","url":"https://github.com/advisories/GHSA-cfcv-hfxc-g2rj","modified":"2026-11-11T00:32:43Z","checkedAt":"2026-11-14T06:50:34.651Z"}],"aiSummary":{"text":"Kong Gateway Enterprise and Kong AI Gateway's proxy-cache and proxy-cache-advanced plugins may serve a cached response for one hostname to another due to omitting the request hostname from the cache key. Affected versions include Kong Gateway Enterprise 3.10.0.0 to 3.10.0.19, 3.13.0.0 to 3.13.0.11, 3.14.0.0 to 3.14.0.16, 3.15.0.0 to 3.15.0.6, and 3.16.0.0 to 3.16.0.1, as well as Kong AI Gateway 2.2.0. The weakness is related to the use of cache containing sensitive information.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-12T03:56:07.687Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-92545"}]}}