PULSE
EN
FEED
ransombyod reclama a IHG Hotels & Resorts (Estate) · GB · Hospitalityransomaoqin reclama a SILIKO d.o.o. · SI · Manufacturingransomaoqin reclama a Petroshahd(Enap Sipetrol International - Egypt Branch) · CL · Energy & Utilitiesransomaoqin reclama a Nextron Technology · CN · Technologyransomaoqin reclama a Goldsmith & Hull · US · Professional Servicesransomincransom reclama a fidepartners.com · ES · Financial Servicesransomincransom reclama a roundglass.com · US · Healthcareransomincransom reclama a butler.legal · US · Professional Servicesransomincransom reclama a innovativedriven.com · US · Technologyransomincransom reclama a bliss1041.com · USransomscarlettgroup reclama a medinahealthcare.net · Healthcareransomincransom reclama a hillandbeyer.com · US · Professional Servicesransomchaos reclama a darrequipment.com · US · Manufacturingransomwhitearmor reclama a Project Trojan Horse · Otherransombyod reclama a IHG Hotels & Resorts (Estate) · GB · Hospitalityransomaoqin reclama a SILIKO d.o.o. · SI · Manufacturingransomaoqin reclama a Petroshahd(Enap Sipetrol International - Egypt Branch) · CL · Energy & Utilitiesransomaoqin reclama a Nextron Technology · CN · Technologyransomaoqin reclama a Goldsmith & Hull · US · Professional Servicesransomincransom reclama a fidepartners.com · ES · Financial Servicesransomincransom reclama a roundglass.com · US · Healthcareransomincransom reclama a butler.legal · US · Professional Servicesransomincransom reclama a innovativedriven.com · US · Technologyransomincransom reclama a bliss1041.com · USransomscarlettgroup reclama a medinahealthcare.net · Healthcareransomincransom reclama a hillandbeyer.com · US · Professional Servicesransomchaos reclama a darrequipment.com · US · Manufacturingransomwhitearmor reclama a Project Trojan Horse · Other
← Todos los CVEs
CVE Watch4 nov 2026

CVE-2026-120646

CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo.

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 4 nov 2026 · Última mod.: 4 nov 2026 · CWE-843

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo. uploadInfo dereferences its argument and calls its filename method without checking that it is an upload filehandle. A plain string naming a defined global variable, such as the parameter value from ?upload=0, is treated as a symbolic reference, and the method call on it dies.

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1212338.8 ALT
—
———Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)2hCVE-2026-1212288.8 ALT
—
———Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)2hCVE-2026-1212268.8 ALT
—
———Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)9hCVE-2026-1212218.8 ALT
—
———Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)9hCVE-2026-1212188.8 ALT
—
———Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)9hCVE-2026-1212108.8 ALT
—
———Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)9h