Cyber ·
CVE-2026-13575 affects HTTP::Session for Perl
An advisory published on November 1, 2026, says HTTP::Session versions earlier than 0.54 allow memcached command injection through unfiltered session IDs.
The CVE-2026-13575 advisory says Perl package HTTP::Session versions earlier than 0.54 allow memcached command injection when session IDs are not filtered. The record identifies the distribution as http-session and was published on November 1, 2026; the supplied material gives no further impact details or specific exploitation guidance.
Teams using the package should check the installed version and consult the original advisory and distribution metadata to confirm scope and remediation guidance. If using AI to analyze the material, do not include session IDs, credentials, or other internal data; share only sanitized excerpts and verify technical recommendations against the original sources.
Original source: CVE-2026-13575: injeção de comandos memcached no HTTP::Session para Perl