UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-120646
CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo. uploadInfo dereferences its argument and calls its filename method without checking that it is an upload filehandle. A plain string naming a defined global variable, such as the parameter value from ?upload=0, is treated as a symbolic reference, and the method call on it dies.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-04T01:29:06.847378+00:00
- Cve id
- CVE-2026-120646
- First seen by Signal
- 2026-11-04T01:30:00+00:00
- Name
- CVE-2026-120646
- Retrieved at
- 2026-11-04T01:30:00+00:00
- Published at
- 2026-11-04T00:17:26.140
- Last modified
- 2026-11-04T00:17:26.140
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph