← All advisories

Critical severity9.8NVD Advisory· Published Jul 20, 2026· Updated Jul 20, 2026

CVE-2026-16235

CVE-2026-16235

Description

Crypt::Password versions through 0.28 for Perl generate insecure random values for salts.

These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

Affected products

1

Perl Foundation/Crypt::Passwordllm-create
Range: <=0.28

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.