---
id: 7603
title: "Cache key injection: Smuggling poison through the door"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/lab/research-cache-key-injection"
published_at: "2026-09-17T11:27:00Z"
tags: ["cloudflare", "stored-xss", "nginx", "cpdos", "web-cache-poisoning", "cache-key-injection", "cache-deception"]
phying_url: "https://phying.com/item/7603"
lang: en
---

# Cache key injection: Smuggling poison through the door

## Summary

How ambiguous NGINX cache keys can enable access-control bypasses, cache deception, CPDoS, stored XSS and origin cache poisoning.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2026-09-17T11:27:00Z
- **Original:** https://www.yeswehack.com/lab/research-cache-key-injection
- **Phying News:** https://phying.com/item/7603