Linuxsecurity Critical CPU Exhaustion Vulnerabilities in Perl Modules Announced
Article Content
- •CVE-2026-60074 and CVE-2026-14741 expose critical CPU exhaustion vulnerabilities.
- •Affected Perl modules include Date::Manip (up to 6.99) and HTTP::Date (before 6.08).
- •Immediate updates are recommended to prevent potential denial of service attacks.
Mageia has issued advisories for two critical vulnerabilities affecting Perl modules Date::Manip and HTTP::Date. The vulnerabilities allow for CPU exhaustion through specific parsing methods, impacting versions of both modules. Date::Manip versions up to 6.99 are affected by non-ASCII decimal digits causing corrupted dates and quadratic backtracking issues. HTTP::Date versions before 6.08 are vulnerable to polynomial regex backtracking in date parsing. These vulnerabilities could potentially lead to denial of service conditions. The CVEs associated with these vulnerabilities are CVE-2026-60074 and CVE-2026-14741. Users are urged to update to the latest versions to mitigate these risks. The advisories were published on September 1, 2026, and highlight the urgency of addressing these flaws.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-14741 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…