HHMBRAND

Products

Exploited and recent CVEs

• CVE-2026-60082 Critical 9.1 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row 0.7%
• CVE-2026-60081 High 7.5 DBI::ProfileData versions before 1.651 for Perl do not limit the path index 0.6%
• CVE-2026-15392 High 7.7 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location 0.2%
• CVE-2026-15043 Critical 9.8 DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text 0.7%
• CVE-2026-14740 Critical 9.1 DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment 0.7%
• CVE-2026-14739 Critical 9.8 DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders 0.4%
• CVE-2026-9698 High 7.5 DBI versions before 1.648 for Perl saved errors in a limited-sized buffer 0.5%
• CVE-2026-10879 Critical 9.8 DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders 0.5%
• CVE-2026-7111 High 8.4 Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption 0.2%