CVE-2026-5086

The Crypt::SecretBuffer Perl module (developed by NERDVANA) is vulnerable to timing attacks in versions prior to 0.019 . If the module is used to store and compare plaintext passwords, an attacker can exploit discrepancies in processing time to guess secret passwords. A proof-of-concept was publi...