CVE-2026-6907 | Django up to 5.2.13/6.0.4 django.middleware.cache.UpdateCacheMiddleware cache containing sensitive information

A vulnerability has been found in Django up to 5.2.13/6.0.4 and classified as problematic. Affected is an unknown function of the component django.middleware.cache.UpdateCacheMiddleware. The manipulation leads to use of cache containing sensitive information.

This vulnerability is uniquely identified as CVE-2026-6907. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.