Re: CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfu

Re: CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL

Reported by oss-security

Summary by Cyber Security News23 Sep 2026, 17:05 CEST

About this summary. This is a short, independently written summary of an article first published by oss-security. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q3/882

Posted by Robert Rothenberg on Sep 23 We are not aware of reverse dependencies. Yes, all versions have been removed, however they may exist on independent mirrors. 1.00 did not have the dropper, but does not appear to have worked properly.

Read the full article at oss-security →

Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL

Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs

CVE-2026-97230: IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL

'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing

MacSync malware uses public iCloud calendars to deliver new payloads

Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison