TI-2026-07425 CVE-2026-8450 · GHSA-3hc6-3p33-wq57
OS command injection in OALDERS HTTP::Daemon
Priority MEDIUM 50
HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file().
OALDERS
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
OALDERS records in CISA KEVNo OALDERS vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2026-12419 CVE-2026-14741 · GHSA-mcqf-9rr5-v7rw
Regular expression denial of service in OALDERS HTTP::Date
Priority MEDIUM 40
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date.
TI-2026-07753 CVE-2026-8829 · GHSA-9p7j-9995-m88w
Use after free in OALDERS HTML::Entities
Priority LOW 39
HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities.
TI-2026-07361 CVE-2026-8368 · GHSA-39wp-j2gg-h44j
Insufficiently protected credentials in OALDERS LWP::UserAgent
Priority LOW 28
LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects.
TI-2026-07568 CVE-2026-8612 · GHSA-38r9-g25v-vcvr
Deserialization of untrusted data in OALDERS WWW::Mechanize::Cached
Priority LOW 23
WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution.