CVE-2026-120640

The Perl CGI module (versions before 5.00 ) is vulnerable to a request forgery flaw. The root cause is that the module fails to distinguish between actual request body payloads and user-supplied parameters because it accepts the names POSTDATA, PUTDATA, PATCHDATA, and XForms:Model from query stri...