CVE-2026-86219

Authen::SASL::Perl::DIGEST_MD5 (Perl) versions before 2.2100 fail to verify that the nonce in a client's response matches the nonce originally sent in the server's challenge. Because server_step derives the expected digest from the client's own parameters and the replay-count table is keyed on th...