CVE-2026-86219

The Authen::SASL::Perl::DIGEST_MD5 component in Perl (versions before 2.2100 ) is vulnerable to a replay attack due to an unverified nonce in the server_step function. While server_start generates a fresh nonce, the system fails to compare the returned value against the original challenge. Conseq...