CHORNY

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

CHORNY records in CISA KEV

No CHORNY vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Apache · all components

TI-2025-27322 CVE-2025-40931 · GHSA-32fg-c88m-mcrv

MEDIUM 48

Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00643 Published 2026-03-05 No fix listed CWE-338

TI-2013-06215 CVE-2013-10075 · GHSA-c9p5-pwmj-4f88

MEDIUM 47

Apache::Session versions through 1.94 for Perl re-creates deleted sessions.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00356 Published 2026-05-08 No fix listed CWE-672

TI-2026-04436 CVE-2026-5081 · GHSA-546v-xqjf-qgcr

MEDIUM 45

Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00302 Published 2026-05-06 No fix listed CWE-340