CVE-2026-65065

Data::RoaringBitmap::Shared versions prior to 0.02 for Perl are vulnerable because they create a world-readable mmap backing file using open(path, O_RDWR|O_CREAT, 0666) without the O_EXCL or O_NOFOLLOW flags. Due to the default umask of 022, the resulting file mode is 0644, allowing any local use...

CVE-2026-65065 Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in roaring.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

CVE-2026-65064

Data::HashMap::Shared versions before 0.14 for Perl are vulnerable to a local security issue due to improper file permissions and missing flags in shm_generic.h. The software creates an mmap backing file with a mode of 0666 , which defaults to 0644 (world-readable) under a standard umask. Further...

CVE-2026-65064 Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in shmgeneric.h with openpath, ORDWR | OCREAT | OCLOEXEC, 0666. The mode is 0666, so under the default umask 022 the file is created mode 06...

CVE-2026-65063 Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in radix.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

CVE-2026-65062 Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in sortedset.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

CVE-2026-65062

The Data::SortedSet::Shared Perl module (versions before 0.03 ) is vulnerable to a local security issue because it creates a world-readable mmap backing file. In sortedset.h, the open() function uses a mode of 0666 , which results in a 0644 file mode under a default umask of 022. Because the O_EX...

CVE-2026-65061

Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in reqrep.h with openpath, ORDWR | OCREAT, 0666, for both the request-reply and the integer-variant segments. The mode is 0666, so under the...

CVE-2026-65061 Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in reqrep.h with openpath, ORDWR | OCREAT, 0666, for both the request-reply and the integer-variant segments. The mode is 0666, so under the...

CVE-2026-65061 Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in reqrep.h with openpath, ORDWR | OCREAT, 0666, for both the request-reply and the integer-variant segments. The mode is 0666, so under the...

CVE-2026-64617

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64615

The Data::Graph::Shared Perl module (versions before 0.04 ) is vulnerable to insecure file handling. The software creates a world-readable mmap backing file using open(path, O_RDWR|O_CREAT, 0666), which results in mode 0644 under a default umask of 022. Because the call lacks O_EXCL , an attacker...

CVE-2026-64615 Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in graph.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64613

Versions before 0.05 of the Perl module Data::Buffer::Shared are vulnerable because they create a world-readable mmap backing file and open it without the O_NOFOLLOW flag. Specifically, in buf_generic.h, the segment is created using open(path, O_RDWR|O_CREAT|O_EXCL, 0666), which results in a 0644...

CVE-2026-64613 Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_NOFOLLOW

Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without ONOFOLLOW. The segment is created in bufgeneric.h with openpath, ORDWR|OCREAT|OEXCL, 0666. OEXCL blocks a pre-seeded file on create, but the mode is 0666, so under the default umask 02...

CVE-2026-64613 Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_NOFOLLOW

Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without ONOFOLLOW. The segment is created in bufgeneric.h with openpath, ORDWR|OCREAT|OEXCL, 0666. OEXCL blocks a pre-seeded file on create, but the mode is 0666, so under the default umask 02...

PT-2026-62058

Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O EXCL or O NOFOLLOW. The segment is created in ndarray.h with openpath, O RDWR|O CREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

PT-2026-62062

Name of the Vulnerable Software and Affected Versions Data::RadixTree::Shared versions prior to 0.02 Description This issue occurs when a world-readable mmap backing file is created and opened without the O EXCL or O NOFOLLOW flags. The segment is created using the open function with a mode of...

PT-2026-62059

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O EXCL or O NOFOLLOW. The segment is created in pubsub.h with openpath, O RDWR|O CREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

PT-2026-59085

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, a...