Read the docs

SHLOMIF

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

SHLOMIF records in CISA KEV

No SHLOMIF vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-09956 CVE-2026-11527 · GHSA-2g88-7qc8-9vxv

OS command injection in SHLOMIF Config::IniFiles

Priority MEDIUM 41

Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.01068 Published 2026-06-14 Fixed in 3.001000 CWE-73
TI-2026-07199 CVE-2026-8177 · GHSA-g5h8-x64v-qf5h

Out-of-bounds read in SHLOMIF XML::LibXML

Priority MEDIUM 40

XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00654 Published 2026-05-10 Partial fix CWE-125
Open these records in search →