CVE-2026-110682: Affected product not specified by the source

Affected technology

Product not specified by the source · 4.42 to before 4.80
Vendor not specified by the source

Description’s affected range: versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse. allow_nonref is enabled by default and incr_parse inherits it

Component: Cpanel::JSON::XS
Function: Cpanel::JSON::XS::incr_parse
File: XS.xs

What an attacker can do

The source does not specify what an attacker can achieve.