Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders 10-99 require four characters, 100-999 require five characters, et cetera.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-07 | 1 | Disclosure1 |
| 2026-06-08 | 1 | Patch1 |
| 2026-06-11 | 2 | Patch2 |
| 2026-07-07 | 1 | Disclosure1 |
| 2026-07-08 | 2 | Disclosure2 |
| 2026-07-11 | 1 | Disclosure1 |
CVE-2026-9698 e CVE-2026-10879 no libdbi-perl podem comprometer seus servidores. Guia com verificação, script de correção e mitigação alternativa. Saiba mais: -> http://tinyurl.com/mtbe67d2 #Debian https://t.co/3A3bRZdP0M
Post summary
The tweet alerts about CVE‑2026‑9698 and CVE‑2026‑10879 affecting libdbi‑perl servers and offers a guide with a corrective script and mitigation steps via a link.
CVE-2026-10879: Perl's DBI module before 1.648 has a critical heap overflow (CVSS 9.8) triggered by preparsing SQL with more than 9 binders. No auth, no interaction needed. Upgrade to DBI 1.648 now. https://secalerts.co/vulnerability/CVE-2026-10879 https://t.co/rURBIPWh9M
Post summary
Perl's DBI module has a critical heap overflow (CVE-2026-10879); upgrading to version 1.648 immediately mitigates the vulnerability.
Perl CPAN CVE-2026-10879: DBI before 1.648 have a heap overflow when preparsing SQL statements with more than 9 binders https://www.openwall.com/lists/oss-security/2026/06/06/4 CVE-2026-9270,CVE-2026-11362: DataDog::DogStatsd through 0.07 allow metric injections https://www.openwall.com/lists/oss-security/2026/06/06/5 & https://www.openwall.com/lists/oss-security/2026/06/06/6
Post summary
The post announces two Perl CPAN package vulnerabilities, providing technical details of the heap overflow and metric injection issues, without mentioning patches, exploitation, or PoCs.
CVE-2026-10879: Heap Overflow in Perl DBI - What It Means for Your Business and How to Respond https://hubs.li/Q04pf4J80
Post summary
The article announces a heap overflow in Perl DBI (CVE‑2026‑10879) but provides no PoC, exploit code, evidence of active exploitation, or remediation steps.
🚨 CRITICAL - Perl DBI heap overflow via extreme SQL placeholders (CVE-2026-14739) DBI for Perl before 1.650 is vulnerable to a heap overflow in its SQL statement preparse logic when handling an extreme number of placeholders. The root cause is improper bounds checking / insufficient heap allocation (heap-based buffer overflow) stemming from an incomplete prior fix for CVE-2026-10879. An attacker can exploit this by feeding an application a crafted SQL statement (directly or via user-controlled query construction) containing roughly 1.2M placeholders, triggering memory corruption during preparse without needing elevated privileges beyond reaching the vulnerable code path. Successful exploitation can lead to process crashes (DoS) and potentially remote code execution in the context of the Perl application. 👉 Affected: DBI for Perl < 1.650 | Upgrade to 1.650
Post summary
The text announces a critical heap overflow in Perl DBI, provides technical exploitation details, and recommends upgrading to version 1.650.
🚨*CVE* CVE-2026-14739 DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not all… https://www.cve.org/CVERecord?id=CVE-2026-14739 ----- Traducción: CVE-2026-14739 DBI… http://infoflow.cloud`
Post summary
A new CVE—CVE‑2026‑14739—has been disclosed, describing a heap overflow in Perl’s DBI library when parsing SQL statements with many placeholders.
CVE-2026-14739 DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not all… https://www.cve.org/CVERecord?id=CVE-2026-14739
Post summary
A heap‑overflow vulnerability in Perl's DBI prior to 1.650 is described, but no proof of concept, exploit, active exploitation, or patch information is provided.
🚨 CRITICAL: CVE-2026-10879 | CVSS 9.8 Perl DBI <1.648 has heap overflow when parsing SQL with 10+ placeholders. Network exploitable, no auth required. Patch immediately to v1.648+ #CVE #Vulnerability #PatchNow https://t.co/cuhUZrtTU3
Post summary
Critical CVE-2026-10879 affects Perl DBI versions below 1.648, causing a heap overflow exploitable over the network without authentication; users should immediately upgrade to v1.648 or newer.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | perl | dbi | - | - | - |