Read the docs
Red Hat Security Advisory

RHSA-2026:36187

perl-HTTP-Daemon security update

Released 2026-07-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 50

HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file().

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01398 Published 2026-05-27 Partial fix · 6.17 CWE-73