CVE-2026-29202
Insufficient input validation of the parameter of the plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.
Published May 8, 2026 · updated Jun 17, 2026
Insufficient input validation of the parameter of the plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 8, 2026 · NIST NVD
Detected
Insufficient input validation of the parameter of the plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.
Jun 17, 2026 · NIST NVD
Updated
Insufficient input validation of the parameter of the plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.
Sources
- CVE.orgVulnerability recordCVE-2026-29202
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-29202
Insufficient input validation of the parameter of the plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.
nvd.nist.gov