CVE-2026-120651

CGI versions before 5.00 for Perl are vulnerable to a denial of service (DoS) attack due to an infinite loop in the read_postdata_putdata function. This occurs when $DISABLE_UPLOADS is set and a request contains a body shorter than its declared Content-Length header. Because the system attempts t...