CVE-2026-56016

The CGI::Session::ID::md5 component for Perl, in versions prior to 4.49 , is vulnerable to session hijacking due to the generation of predictable session IDs. The generate_id method relies on low-entropy sources, including the process ID (PID), epoch time (which can be inferred from HTTP headers)...