EUVD-2026-46370

Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in deque.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

EUVD-2026-46372

Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in ndarray.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

EUVD-2026-46379

Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in ring.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

EUVD-2026-46375

Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in sortedset.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

CVE-2026-65068

Data::SpatialHash::Shared before 0.02 (Perl) creates a world-readable mmap backing file via open(path, O_RDWR|O_CREAT, 0666) in sphash.h, with mode 0666 resulting in 0644 under umask 022. Absence of O_NOFOLLOW allows following a symlink, and absence of O_EXCL lets a pre-planted file be used, enab...

CVE-2026-65068 Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in sphash.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

CVE-2026-65066 Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in ring.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

CVE-2026-65065 Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in roaring.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

CVE-2026-65064

CVE-2026-65064 affects Data::HashMap::Shared versions before 0.14 (Perl). A world-readable mmap backing file is created with mode 0666 and opened without O_EXCL or O_NOFOLLOW, allowing a pre-created file or symlink to be used and enabling local access to IPC payloads in shared directories like /t...

CVE-2026-65063

Data::RadixTree::Shared for Perl prior to 0.02 creates a world-readable mmap backing file via open(path, O_RDWR|O_CREAT, 0666). The file is created with mode 0666 so under umask 022 it is 0644 (world-readable). With O_NOFOLLOW missing and O_EXCL missing, a symlink or pre-created file at the path ...

CVE-2026-65062

Data::SortedSet::Shared for Perl (before 0.03) creates an mmap backing file with mode 0666 and opens it with O_RDWR|O_CREAT, but without O_EXCL or O_NOFOLLOW. The segment is created in sortedset.h with open(path, O_RDWR|O_CREAT, 0666). With umask 022, the resulting file is world-readable (0644). ...

CVE-2026-64617

Data::PubSub::Shared for Perl (versions before 0.07) creates a world-readable mmap backing file via pubsub.h open(path, O_RDWR|O_CREAT, 0666) and may follow a pre-planted symlink because O_NOFOLLOW and O_EXCL are not used. With mode 0666 and umask 022, the resulting file is typically 0644 (world-...

CVE-2026-64615

Data::Graph::Shared (Perl)

CVE-2026-64615 Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in graph.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64614

Data::Deque::Shared for Perl (versions

CVE-2026-64613 Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_NOFOLLOW

Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without ONOFOLLOW. The segment is created in bufgeneric.h with openpath, ORDWR|OCREAT|OEXCL, 0666. OEXCL blocks a pre-seeded file on create, but the mode is 0666, so under the default umask 02...

CVE-2026-64158

CVE-2026-64158 concerns the Linux kernel netfs write path. The vulnerability/issue arises from the write streaming mechanism in netfs_perform_write(), which caches dirty data in dirty-but-not-yet-up-to-date folios to avoid unnecessary reads when data will be overwritten. The implementation previo...

Anthropic Claude Code 2.1.59 < 2.1.128 Information Disclosure (CVE-2026-46406)

The version of Anthropic Claude Code installed on the remote host is 2.1.59 prior to 2.1.128. It is, therefore, affected by an information disclosure vulnerability: - The Claude Code /copy command wrote responses to a hardcoded, predictable path /tmp/claude/response.md without UID isolation,...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 — Copy Fail Local Privilege Escalation i...

CVE-2017-18424

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...