CVE-2026-63454

An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution...

CVE-2026-65069

The CVE-2026-65069 issue affects Data::DisjointSet::Shared (

CVE-2026-65068

CVE-2026-65068 affects Data::SpatialHash::Shared prior to 0.02 for Perl. The code opens a shared mmap backing file with open(path, O_RDWR|O_CREAT, 0666) and creates the file with mode 0666 (often 0644 under default umask) in a world‑readable location (e.g., /tmp or /dev/shm). Because O_NOFOLLOW i...

CVE-2026-65068 Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in sphash.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

CVE-2026-65067 Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in intern.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-65067

CVE-2026-65067 affects Data::Intern::Shared prior to 0.02 for Perl. The code creates a world-readable mmap backing file via open(path, O_RDWR|O_CREAT, 0666) with mode 0666, which becomes 0644 under the default umask. Absence of O_NOFOLLOW means a symlink at the path is followed, and absence of O_...

CVE-2026-65066

Data::RingBuffer::Shared for Perl versions before 0.04 creates a world-readable mmap backing file via open(path, O_RDWR|O_CREAT, 0666) with mode 0644 after umask. The code uses O_NOFOLLOW absent and O_EXCL absent, so a symlink or pre-created file at the path can be followed or reused, enabling a ...

CVE-2026-65066 Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in ring.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

CVE-2026-65065 Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in roaring.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

CVE-2026-65065

Summary: CVE-2026-65065 affects Data::RoaringBitmap::Shared before 0.02 for Perl. The code creates a shared mmap backing file via open(path, O_RDWR|O_CREAT, 0666) with mode 0666, yielding a world-readable 0644 file after umask. Absence of O_NOFOLLOW allows following a symlink, and absence of O_EX...

CVE-2026-65064 Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in shmgeneric.h with openpath, ORDWR | OCREAT | OCLOEXEC, 0666. The mode is 0666, so under the default umask 022 the file is created mode 06...

CVE-2026-65064

Data::HashMap::Shared before 0.14 for Perl creates a world-readable mmap backing file and opens it with 0666 permissions, without O_EXCL or O_NOFOLLOW. The file is opened with open(path, O_RDWR|O_CREAT|O_CLOEXEC, 0666) in shm_generic.h, yielding a world-readable 0644 file (umask 022). A pre-creat...

CVE-2026-65063 Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in radix.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

CVE-2026-65063

Data::RadixTree::Shared prior to 0.02 for Perl creates a world-readable mmap backing file via open(path, O_RDWR|O_CREAT, 0666) in radix.h. With default umask 022, the resulting mode is 0644, making the file world-readable. O_NOFOLLOW is not used, so a symlink at the path is followed; O_EXCL is no...

CVE-2026-65062 Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in sortedset.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

CVE-2026-65062

CVE-2026-65062 (Data::SortedSet::Shared) affects Perl versions before 0.03. Affected code creates an mmap-backed segment with world-readable permissions by opening a path with open(path, O_RDWR|O_CREAT, 0666) and a mode of 0666. With the default umask, this yields 0644, making the backing file wo...

CVE-2026-65061

Data::ReqRep::Shared for Perl is affected in versions before 0.05. The issue arises because the code creates a world-readable mmap backing file by opening path with O_RDWR | O_CREAT and mode 0666 (leading to 0644 under umask) and does not use O_EXCL or O_NOFOLLOW, allowing a local user to read IP...

CVE-2026-65061 Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in reqrep.h with openpath, ORDWR | OCREAT, 0666, for both the request-reply and the integer-variant segments. The mode is 0666, so under the...

CVE-2026-64617

Data::PubSub::Shared before 0.07 (Perl) creates a world-readable mmap backing file via open(path, O_RDWR|O_CREAT, 0666) with mode 0644 after umask. Lack of O_NOFOLLOW and O_EXCL enables a local attacker to follow a symlink or race, potentially reading IPC payloads stored in the shared segment. Th...

CVE-2026-64617 Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...