As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-86219: Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-86219: Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step
CVE-2026-86219 affects Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100, allowing attackers to replay authentication responses because the server_step function fails to verify the nonce. This cryptographic weakness in the Perl SASL library undermines the security of Digest MD5 authentication mechanisms.
Why it matters: Perl applications using Authen-SASL for DIGEST_MD5 authentication require immediate update to version 2.2100 or later to prevent attackers from bypassing authentication controls with captured credentials.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-86219: Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step
CVE-2026-86219 affects Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100, allowing attackers to replay authentication responses because the server_step function fails to verify the nonce. This cryptographic weakness in the Perl SASL library undermines the security of Digest MD5 authentication mechanisms.
Why it matters: Perl applications using Authen-SASL for DIGEST_MD5 authentication require immediate update to version 2.2100 or later to prevent attackers from bypassing authentication controls with captured credentials.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-86219: Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step
Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 contain a vulnerability that allows attackers to replay authentication responses by exploiting unverified nonces in the server_step function. The Perl CPAN Security Group disclosed CVE-2026-86219 on September 6, 2026.
Why it matters: Perl applications using vulnerable versions of Authen-SASL for DIGEST_MD5 authentication face replay attacks that could allow unauthorized access; developers should upgrade to version 2.2100 or later.
- Source published
- First seen by Cybersecurity Tracker