Red Hat Security Advisory

RHSA-2026:93585

perl-HTTP-Daemon security update

Released 2026-11-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) perl-HTTP-Daemon-6.16-7.el10_0.1

TI-2026-07425 CVE-2026-8450 · GHSA-3hc6-3p33-wq57

MEDIUM 50

HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file().

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01398 Published 2026-05-27 Partial fix · 6.17 CWE-73