CVE-2026-110675

A flaw was found in Cpanel::JSON::XS. When configured to accept unquoted hash keys, the parser fails to properly validate UTF-8 encoding, allowing malformed byte sequences into decoded hash structures. A remote attacker could exploit this vulnerability by supplying crafted JSON input with invalid...