CVE-2026-7381 - Critical (9.1)
Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting.
Plack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the client via the X-Sendfile-Type header, if it is n...
https://www.thehackerwire.com/vulnerability/CVE-2026-7381/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack