CVE-2026-78030: DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM

As cited

Copy frozen at 2026-09-19 19:56 UTC (site build).

vulnerabilities

CVE-2026-78030: DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM

CVE-2026-78030 affects DBI versions before 1.653 for Perl, allowing arbitrary module loading through unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM. Organizations using vulnerable versions should upgrade to 1.653 or later.

Why it matters: Perl developers and DevOps teams using DBI for database access face remote code execution risk if applications process untrusted input to these attributes; immediate patching is required.

Source published

2026-09-19 16:14 UTC

First seen by Cybersecurity Tracker

2026-09-19 17:49 UTC