VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 16, 2026· Updated Jun 17, 2026

CVE-2025-15578

CVE-2025-15578

Description

Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely. The session id is seeded with the system time (which is available from HTTP response headers), a call to the built-in rand() function, and the PID.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Teejay/Maypole4 versions
    cpe:2.3:a:teejay:maypole:*:*:*:*:*:perl:*:*+ 3 more
    • cpe:2.3:a:teejay:maypole:*:*:*:*:*:perl:*:*range: >=2.10,<=2.13
    • cpe:2.3:a:teejay:maypole:2.111:*:*:*:*:perl:*:*
    • cpe:2.3:a:teejay:maypole:2.121:*:*:*:*:perl:*:*
    • (no CPE)range: 2.10
  • Perl Foundation/Maypolellm-create
    Range: 2.10 - 2.13

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.