Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-12 | 1 | Disclosure1 |
| 2026-02-13 | 1 | Disclosure1 |
| 2026-02-16 | 1 | Patch1 |
| 2026-02-18 | 1 | Disclosure1 |
CVE-2025-40905: WWW::OAuth 1.000 and earlier for Perl uses insecure rand() function for cryptographic functions https://www.openwall.com/lists/oss-security/2026/02/13/1 Upgrade to WWW::OAuth 1.001 or higher
Post summary
CVE-2025-40905 affects WWW::OAuth 1.000 and earlier due to insecure rand() usage; users should upgrade to 1.001 or newer to resolve the issue.
CVE-2025-40905 WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. https://www.cve.org/CVERecord?id=CVE-2025-40905
Post summary
The text announces CVE‑2025‑40905, noting that the Perl WWW::OAuth module uses a non‑cryptographic rand() function for entropy, but does not mention any PoC, exploit, or mitigation details.
⚡ New CVE Alert: CVE-2025-40905 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-40905 #CVE-2025-40905 #CVE #CyberSecurity #InfoSec https://t.co/2xDVL6O9yv
Post summary
The post announces a new CVE (CVE‑2025‑40905) with minimal details and links only to the NVD entry; it offers no exploit, patch, or technical information.
CVE-2025-40905 (CVSS:7.3, HIGH) is Awaiting Analysis. WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptograp..https://nvd.nist.gov/vuln/detail/CVE-2025-40905 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE‑2025‑40905, highlighting that WWW::OAuth uses insecure rand() for entropy with a CVSS score of 7.3. No PoC, exploit code, patch, or active exploitation information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dbook | www\ | \ | - | - |