CVE-2013-4226: The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly...

Security readout for executives and security teams

This flaw can expose sensitive pages cached from Drupal superuser activity to another authenticated user with the same role combination. The source bundle names Authenticated User Page Caching (Authcache) 7.x-1.x before 7.x-1.5. No active exploitation evidence is provided. Exposure is limited to Drupal 7 sites using the Authcache module 7.x-1.x before 7.x-1.5, especially where authenticated page caching is enabled and privileged pages may be cached. Prioritize if legacy Drupal 7 systems still use Authcache. The impact is sensitive information disclosure, but available evidence suggests constrained prerequisites and no confirmed active exploitation. Mitigation focus: Upgrade Authcache to 7.x-1.5 or later if still in use.; Check Drupal vendor advisories for any additional module-specific guidance.; Disable authenticated user page caching until version status is confirmed..

Prepared

Jun 6, 2026, 02:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.