Posted by Robert Rothenberg on Nov 07 CVE-2026-121265 CPAN Security Group CVE ID: CVE-2026-121265 Distribution: SQL-Abstract Versions: before 2.000003 MetaCPAN: https://metacpan.org/dist/SQL-Abstract VCS Repo: ...
CVE-2026-121265: SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/574
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
CVE-2026-123776: RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset(), , so a FIFO or device path blocks the CGI process
Posted by Robert Rothenberg on Nov 07 CVE-2026-123776 CPAN Security Group CVE ID: CVE-2026-123776 Distribution: RRD-CGI-Image Versions: through 0.01 MetaCPAN…
No need to hack when it’s leaking: Artex edition
Zack Whittaker reports: Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for anyone to access…
ARTEX abuse expands as cybercriminals target financial sector
Mitigation and protection guidance Microsoft Defender detections Hunting queries Indicators of compromise In October 2026, the financially motivated threat actor…
Re: "sshole": password authentication bypass: OpenSSH + musl libc
Posted by Michael Orlitzky on Nov 06 It was easy to lose in the noise, but musl is not the only one doing this…
CVE-2026-118196: Apache Allura: OAuth1 rebinding
Posted by Dave Brondsema on Nov 06 Severity: critical Affected versions: - Apache Allura through 1.22.0 Description: OAuth 1 rebinding vulnerability in Apache Allura…
[oss-security][CVE-2026-119170] Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
Posted by Alan Coopersmith on Nov 06 Forwarded Message Subject: [Security-announce][CVE-2026-119170] Regression in FIPS enforcement of hash algorithms affecting only…