CVE-2026-120641 | CPANSec CGI up to 4.x Upload lib/CGI.pm filename path traversal

A vulnerability described as critical has been identified in CPANSec CGI up to 4.x. This issue affects some unknown processing of the file lib/CGI.pm of the component Upload Handler. Executing a manipulation of the argument filename can lead to path traversal.

This vulnerability appears as CVE-2026-120641. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More