CVE-2026-5086

creationtimestamp| type| source ---|---|--- 2026-04-14 00:56:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjg6cpzd4n2j 2026-04-14 01:00:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjg6ksfhbr2x 2026-04-15 23:25:26+00:00| published-proof-of-concept|...

CVE-2026-5086

The Crypt::SecretBuffer Perl module (developed by NERDVANA) is vulnerable to timing attacks in versions prior to 0.019 . If the module is used to store and compare plaintext passwords, an attacker can exploit discrepancies in processing time to guess secret passwords. A proof-of-concept was publi...