CVEvulnerability

CVE-2026-47372

9.1 CRITICAL Published 2026-05-20 Modified 2026-07-20 Official page ↗

Status: Deferred
Published: 2026-05-20
Last modified: 2026-07-20
Assigner: 9b29abf9-4ab0-4765-b253-1875cd9b441e
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses: CWE-338

Description

Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

Weakness · CWE (1)

CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) weakness

References

https://github.com/robrwo/perl-Crypt-SaltedHash/commit/9b68437d2cd420b819b3a795474c3870338d38d5.patch github.com
https://metacpan.org/release/RRWO/Crypt-SaltedHash-0.10/changes metacpan.org
http://www.openwall.com/lists/oss-security/2026/05/20/22 www.openwall.com

CVE-2026-47372

Description

Related

Weakness · CWE (1)

References