🚨 EUVD-2026-26369

[euvd_bot@mastodon.social]

EUVD-2026-26369

Score: n/a
Product: Dancer::Session::Abstract
Vendor: BIGPRESH
Updated: 2026-04-30

Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely.

The session id is generated from summing the character codepoints of the absolute pathname with the process id, the epoch time and calls to the built-in rand() ...

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26369

#cybersecurity #infosec #euvd #cve #vulnerability