IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-06-26 09:16

MODIFIED

2026-06-26 09:16

EPSS (Prob. Exploit)

0.51%

Top 56.6%

DATA SOURCES:

NVD 🔗 2026-06-26 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-01

> DESCRIPTION

Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes. When an object is initialised before forking, then the internal state for the PRNG is shared across processes and identical random streams will be produced. Secrets generated in multiprocess applications are predictable across processes.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-335

> CWE DETAILED DESCRIPTIONS

CWE-335: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) - The product uses a Pseudo-Random Number Generator (PRNG) but does not correctly manage seeds.

> HISTORIQUE DES MODIFICATIONS

Première apparition

26/06/2026 09:16

Source: NVD

📊 ENRICHISSEMENT 01/07/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

CWE-335: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) - The product uses a Pseudo-Random Number Generator (PRNG) but does not correctly manage seeds.

Total des modifications: 1 Dernière mise à jour: 4 months ago

> REFERENCES

https://github.com/daoswald/Bytes-Random-Secure-Tiny/issues/6

https://github.com/daoswald/Bytes-Random-Secure-Tiny/pull/7

https://security.metacpan.org/patches/B/Bytes-Random-Secure-Tiny/1.011/CVE-2026-...

https://www.cve.org/CVERecord?id=CVE-2026-41564