CVE-2026-57082

Net::BitTorrent for Perl up to version 2.0.1 uses Diffie–Hellman with the private key derived from Perl’s non‑cryptographic PRNG (rand()). The MSE handshake therefore relies on a predictable PRNG seeded once per process, making the shared secret and RC4 keys (derived from the SHA‑1 of keyA/keyB, ...