CVE-2026-6146 Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys

🗓️ 11 May 2026 19:12:17Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

CVE-2026-6146 affects Amazon::Credentials up to 1.2.0; it uses rand for a 64-bit key and obfuscated secrets.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2026-6146	11 May 202619:47	–	circl
CNNVD	Amazon::Credentials 安全特征问题漏洞	11 May 202600:00	–	cnnvd
CVE	CVE-2026-6146	11 May 202619:12	–	cve
Cvelist	CVE-2026-6146 Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys	11 May 202619:12	–	cvelist
EUVD	EUVD-2026-29199	11 May 202621:31	–	euvd
NVD	CVE-2026-6146	11 May 202620:25	–	nvd
Positive Technologies	PT-2026-39740	11 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-6146	13 May 202614:22	–	redhatcve
Vulnrichment	CVE-2026-6146 Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys	11 May 202619:12	–	vulnrichment

Source	Link
openwall	www.openwall.com/lists/oss-security/2026/05/11/15
cpan	www.cpan.org/modules
metacpan	www.metacpan.org/release/BIGFOOT/Amazon-Credentials-1.2.0/source/lib/Amazon/Credentials.pm
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/6xxx/CVE-2026-6146.json
metacpan	www.metacpan.org/release/BIGFOOT/Amazon-Credentials-1.3.0/changes
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-6146
github	www.github.com/rlauer6/Amazon-Credentials

08 Jul 2026 08:09Current

6Medium risk

Vulners AI Score6

CVSS 3.15.3

EPSS0.00174

cve 2026 6146 amazon credentials perl module random key cryptography weakness obfuscated secrets