TI-2026-09955 CVE-2026-11526 · GHSA-hx22-9fx3-xg77
OS command injection in RURBAN GD
Priority MEDIUM 52
GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle.
RURBAN
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
RURBAN records in CISA KEVNo RURBAN vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2022-24155 CVE-2022-48623 · GHSA-44qr-8pf6-6q33
The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a…
Priority MEDIUM 47
The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service.
TI-2026-08360 CVE-2026-9516 · GHSA-32gp-2g42-v9vc
Improper handling of exceptional conditions in RURBAN Cpanel::JSON::XS
Priority LOW 39
Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws.
TI-2026-08187 CVE-2026-9334 · GHSA-qfqj-xxqv-cxfw
Type confusion in RURBAN Cpanel::JSON::XS
Priority LOW 38
Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled.
TI-2025-27320 CVE-2025-40929 · GHSA-q7gx-445j-xwq8
Heap-based buffer overflow in RURBAN Cpanel::JSON::XS
Priority LOW 26
Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact