CVE-2026-6656 is a vulnerability in Crypt::Password versions through 0.28 for Perl, allowing timing attacks due to the use of the built-in eq operator in the check_password method. This issue enables attackers to guess the underlying hash by analyzing timing discrepancies. The vulnerability affects Perl applications using Crypt::Password for password management. Developers should prioritize patching to pr [truncated]
The CVE record for CVE-2026-16235 was published on 2026-07-20T07:16:37.320Z. Crypt::Password versions up to 0.28 for Perl use the built-in rand function for generating salts, which is predictable and unsuitable for cryptographic purposes. This vulnerability impacts the security of password storage in affected applications. Developers and security teams should verify and update to a secure version to preve [truncated]
