UpstreamscvelistV5 18:04ZCISA KEV 19:16ZVulnrichment 18:04ZNVD 18:04ZEPSS 19:16Zdaily run 06:06 UTC · next hourly 20:15

Sat 31 Oct 2026

Today

83 new ≥ 9.0 · 13 actionable · CPANSec clear

PriorityVulnerabilityCVSSEPSSSignals

CPANSec3 vulnerabilitiesMax CVSS 9.1Priority 35KEV 0

35

CVE-2026-94140

CPANSec · Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no

9.10.4%

35

CVE-2026-94423

CPANSec · Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts

9.10.4%

33

CVE-2026-113812

CPANSec · Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates

9.10.3%

CVSS ×30KEV +30EPSS ×20exploit +10 · SSVC +10how the score works