CVE-2026-120650

🗓️ 04 Nov 2026 00:03:26Reported by redhat.comType

A flaw was found in perl-cgi. A remote attacker can trigger a Denial of Service (DoS) through excessive memory, processor, and disk space consumption by sending specially crafted HTTP requests. Due to missing or unenforced limits on request sizes,...

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2026-120650	3 Nov 202623:41	–	cve
Cvelist	CVE-2026-120650 CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits	3 Nov 202623:41	–	cvelist
EUVD	EUVD-2026-116616	4 Nov 202600:32	–	euvd
NVD	CVE-2026-120650	4 Nov 202600:17	–	nvd

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-120650
github	www.github.com/leejo/CGI.pm/commit/17b838dc14d2b82ae6c7e76f66ec2c3f3b08038b.patch
github	www.github.com/leejo/CGI.pm/commit/277baeb74fde7bce975a7bd0a1f98dcf1b9b2050.patch
github	www.github.com/leejo/CGI.pm/commit/8940a74e53a41563f72813b45f99cceaaa4c92e8.patch
github	www.github.com/leejo/CGI.pm/commit/f3febefe63fe3881d8c3ae10fa83ca8ec950b959.patch
metacpan	www.metacpan.org/release/LEEJO/CGI-4.72/source/lib/CGI.pm
metacpan	www.metacpan.org/release/LEEJO/CGI-5.00/changes
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

04 Nov 2026 00:03Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5