CVE-2026-5087

creationtimestamp| type| source ---|---|--- 2026-03-31 17:51:54+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mieqjpuhg62p 2026-04-03 21:17:42+00:00| published-proof-of-concept| Telegram/qTocgF1bA6EikMAxrpKqC2AQPtdVVaE6KTy64KQmK5LJ1E...

CVE-2026-5087

CVE-2026-5087 affects PAGI::Middleware::Session::Store::Cookie for Perl, versions up to 0.001003. The root cause is that the store reads random bytes directly from /dev/urandom; if that device is unavailable (e.g., on Windows), it issues a warning and falls back to using the built-in rand() funct...