Perl

    Dashboard / Vendors

    Products: 46
    Vulnerabilities: 136
    Known Exploited: 1
    25
    Critical Level Threats
    51
    High Level Threats
    40
    Medium Level Threats
    4
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-118986

    CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand()

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026

    CVE-2026-118987

    CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026

    CVE-2026-118990

    CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026

    CVE-2026-118991

    CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026

    CVE-2026-118992

    CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026
    Items Per Page