VulnSocial

CVE-2026-15392Disclosure

LOWCVSS 7.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories. Callers of file-based drivers can read or write files outside of the data directory.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-19); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-19: 1Mentions · 2026-07-20: 1Patch / Workaround · 2026-07-20: 1Technical Details · 2026-07-19: 1Technical Details · 2026-07-20: 107-1907-20
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-191
Disclosure1
2026-07-201
Patch1
Full discourse2 posts
  • Open Source Security mailing list@oss_security
    Disclosure

    Perl CPAN CVE-2026-60081: DBI::ProfileData before 1.651 do not limit the path index https://www.openwall.com/lists/oss-security/2026/07/14/14 CVE-2026-15392: DBD::File before 1.651 do not ensure the table file is not a symlink to an untrusted location https://www.openwall.com/lists/oss-security/2026/07/14/15

    Post summary

    The post announces two new Perl CPAN module vulnerabilities affecting DBI::ProfileData and DBD::File before version 1.651, detailing path index and symlink traversal risks.

    1000065
    4.7K followersView on X
  • VulniPulse@vulnipulse
    Patch

    ⚠️ Red Hat Enterprise Linux 10 alert: CVE-2026-15392 (CVSS 6.3) Local attackers could access sensitive information. Apply the vendor-recommended mitigation. https://vulnipulse.com/advisories/linux-cve-2026-15392 #Linux #RedHatEnterpriseLinux10 #CyberSecurity #CVE

    Post summary

    The advisory focuses on vendor-recommended mitigation for CVE-2026-15392, providing a CVSS score and noting local attacker impact, but no PoC, exploit, or active exploitation evidence is present.

    0000039
    6 followersView on X

Explore more

Back to dashboard