Skip to main content
2 CVEs CRITICAL CVSS 9.8

Perl Session ID Generation Insecurity

2026-03-05

Information Disclosure
Suse
Plack
Apache
Chorny
CVE-2025-40926 CRITICAL PATCH

Insecure session ID generation in Plack::Middleware::Session::Simple before 0.05 for Perl. Patch available.

9.8
CVSS
0.1%
EPSS
CVE-2025-40931 CRITICAL

Insecure session ID generation in Apache::Session::Generate::MD5 through 1.94 for Perl.

9.1
CVSS
0.0%
EPSS

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy