CVE-2026-110677: Affected product not specified by the source

Affected technology

Product not specified by the source · 4.28 to before 4.80
Vendor not specified by the source

Description’s affected range: versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv

Component: Cpanel::JSON::XS
Function: decode_hv
File: XS.xs

What an attacker can do

The source does not specify what an attacker can achieve.