What is the CVSS score of CVE-2026-3257?

CVE-2026-3257 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Unqlite are affected by CVE-2026-3257?

UnQLite Perl library versions through 0.06 contain a critical vulnerability (CVSS 9.8) that could allow attackers to compromise systems using this embedded database library.

How to fix or mitigate CVE-2026-3257?

Within 24 hours: Inventory all systems and applications using UnQLite for Perl and assess business criticality. Within 7 days: Isolate or restrict network access to affected systems, disable UnQLite functionality where non-essential, and contact vendors for patch timelines. Within 30 days: Migrate to patched versions or alternative database solutions, implement enhanced monitoring for exploitation attempts, and conduct security assessment of affected systems.

Unqlite CVE-2026-3257

CRITICAL

2026-03-05 9b29abf9-4ab0-4765-b253-1875cd9b441e

Heap Overflow Unqlite

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

CVE Published

Mar 05, 2026 - 02:16 nvd

CRITICAL 9.8

DescriptionCVE.org

UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library.

UnQLite for Perl embeds the UnQLite library. Version 0.06 and earlier of the Perl module uses a version of the library from 2014 that may be vulnerable to a heap-based overflow.