TI-2026-12661 Aliases CVE-2026-15043

DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL…

MEDIUM 50CWE-480Published 2026-07-14 · Updated 2026-07-14

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Partial Red Hat: 5 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the is_matched method, <= was evaluated using Perl's ge operator, and >= was evaluated using Perl's le operator. SQL::Nano is the fallback query engine for DBI's file-backed drivers (DBD::File, DBD::DBM, CSV-style drivers) whenever SQL::Statement is not installed, and is forced whenever DBI_SQL_NANO=1. Queries over such tables use these predicates directly. The impact depends on the context. Where an application relies on a WHERE clause to filter file-backed data for policy or authorization, an inverted <=/>= comparison silently returns the wrong rows.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00671 52nd percentileScored 2026-11-07

Fix Partial DBI::SQL::Nano (HMBRAND): 1.651Red Hat: 5 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
HMBRAND	DBI::SQL::Nano	1.42 to before 1.651	1.651	Patch available	CNA

DBI::SQL::Nano VendorHMBRAND Affected 1.42 to before 1.651 Fixed in 1.651 Patch available CNA

Remediation

Fix · CNA DBI::SQL::Nano (HMBRAND) Fixed in 1.651

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 10	Affected	No fix yet: Fix deferred
Red Hat Enterprise Linux 6	Affected	No fix planned: Out of support scope
Red Hat Enterprise Linux 7	Affected	No fix planned: Out of support scope
Red Hat Enterprise Linux 8	Affected	No fix yet: Fix deferred
Red Hat Enterprise Linux 9	Affected	No fix yet: Fix deferred

Timeline

2026-10-02 Threatist record created from CVE-2026-15043
2026-10-25 EPSS moved to the 50th–90th percentile

References

TI-2026-12417 Out-of-bounds write in HMBRAND DBI CVSS 3.1CRITICAL 9.8
TI-2026-09339 Out-of-bounds write in HMBRAND DBI CVSS 3.1CRITICAL 9.8
TI-2026-08500 Out-of-bounds write in HMBRAND DBI CVSS 3.1CRITICAL 9.8
TI-2026-12418 Out-of-bounds read in HMBRAND DBI CVSS 3.1CRITICAL 9.1
TI-2026-42812 Out-of-bounds read in HMBRAND DBI CVSS 3.1CRITICAL 9.1
TI-2026-42811 Resource allocation without limits in HMBRAND DBI::ProfileData CVSS 3.1HIGH 7.5

See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences