CVE-2026-123776

RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset, , so a FIFO or device path blocks the CGI process. The normalizeparams method sends any query key matching /tz/i to tz, which sets $ENVTZ to that value, with no validation. It then calls tzset. gli...