CYBER CODE RED

Get real-time updates on Telegram

CVE-2026-110684: Affected product not specified by the source

Affected technology

Product not specified by the source · 3.0202 to before 4.80
Vendor not specified by the source

Description’s affected range: versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringify. encode_stringify writes a value in its string form under allow_stringify

Component: Cpanel::JSON::XS
Function: encode_stringify
File: XS.xs

What an attacker can do

The source does not specify what an attacker can achieve.

Published

CWE
CWE-401
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-110684.html