CVE-2026-120639 | CPANSec CGI up to 4.x Header Processing lib/CGI.pm header/multipart_start/do_push injection

A vulnerability labeled as critical has been found in CPANSec CGI up to 4.x. This affects the function header/multipart_start/do_push of the file lib/CGI.pm of the component Header Processing. Such manipulation leads to injection.

This vulnerability is documented as CVE-2026-120639. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More