Medium CVE-2026-46739 Net::Statsd versions before 0.13 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. The update_stats (used for updating counters) and gauge methods...

#Sicherheitslücke #Update

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Medium] CVE-2026-46739 – Net::Statsd versions before 0.13 for Perl allow metric injections. The metric n...

VERWANDTEARTIKEL

DSA-6322-1 frr - security update

CVE-2023-5502 - On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication.

CVE-2024-27892 - On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled).

[Medium] CVE-2026-42547 – IRIS is a web collaborative platform that helps incident responders share techni...

[High] CVE-2026-10871 – A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability af...

[Medium] CVE-2026-11322 – Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that all...