CVE-2026-47372
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts.
Published May 20, 2026 · updated Jul 20, 2026
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
May 20, 2026 · NIST NVD
Detected
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
Jul 20, 2026 · NIST NVD
Updated
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
Sources
- CVE.orgVulnerability recordCVE-2026-47372
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-47372
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
nvd.nist.gov