CVE-2026-110687: Affected product not specified by the source

Affected technology

Product not specified by the source · 4.43 to before 4.80
Vendor not specified by the source

Description’s affected range: versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp. canonical sorts keys by UTF-16 code units

Component: Cpanel::JSON::XS
Function: utf16_cmp
File: XS.xs

What an attacker can do

The source does not specify what an attacker can achieve.