CVE-2026-8500

The Web::Passwd Perl module (versions through 0.03 ) is vulnerable to Remote Code Execution (RCE) due to an operating system command injection flaw. The root cause is the lack of validation or escaping of the user parameter , which is used as the last argument in a command-line call to the htpass...