CVE-2026-85491

Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone

CVSS Skor

8.8

EPSS İhtimal

%0.4

Risk Skoru

0.0

Yayın

18 gün önce

Overview (Genel Bakış)Public Exploits (0)Newsroom (Haberler)Vulnerability Timeline

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

Doğrulanmış public exploit kodu bulunamadı.

GitHub depoları, NVD exploit referansları ve Metasploit Framework tarandı. Aktif sömürü kaydı, public exploit kodunun yayınlandığı anlamına gelmez.

İlgili Benzer Açıklar

9.8

CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends

ÜreticiCPANSecÜrünLemonldap-NG-Portal

Yama durumu bilinmiyorEPSS %11 ay önce

9.8

CVE-2026-72887

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

ÜreticiCPANSecÜrünNet-OAuth

Yama doğrulandıEPSS %11 ay önce

9.8

CVE-2026-78183

DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float

ÜreticiCPANSecÜrünDBD-Pg

Yama doğrulandıEPSS %11 ay önce

9.1

CVE-2026-73639

Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8

ÜreticiCPANSecÜrünImager-File-PNG+1 etkilenen

Yama doğrulandıEPSS %125 gün önce

9.8

CVE-2026-73193

DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse

ÜreticiCPANSecÜrünDBI

Yama doğrulandıEPSS %11 ay önce

9.8

CVE-2026-78619

Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically

ÜreticiCPANSecÜrünPunk-TOTP

Yama durumu bilinmiyorEPSS %11 ay önce

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar al Belgeler

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-85491"

Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone

Public Exploits · GitHub ve Metasploit Intelligence

İlgili Benzer Açıklar

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float

Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8

DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse

Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically

Bu açığı API ile alın

DayBreach

Sözlük & Referans

Dizinler & Akışlar

RSS & Entegrasyon