Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-21 | 2 | Disclosure2 |
| 2026-06-11 | 1 | Disclosure1 |
🛡️ Se você usa Ubuntu, verifique sua versão do libcrypt-saltedhash-perl agora mesmo! Uma vulnerabilidade (CVE-2026-47372) permite prever salts de hashes. Saiba mais: -> http://tinyurl.com/vk9zybu2 #Ubuntu https://t.co/m4FVAouYJ1
Post summary
A tweet alerts Ubuntu users to CVE‑2026‑47372 in libcrypt‑saltedhash‑perl, noting it can predict hash salts, but provides no PoC, exploit, or patch details.
Perl CPAN CVE-2026-47372: Crypt::SaltedHash through 0.09 generate insecure random values for salts https://www.openwall.com/lists/oss-security/2026/05/20/22 CVE-2026-47373: Crypt::SaltedHash through 0.09 is susceptible to timing attacks https://www.openwall.com/lists/oss-security/2026/05/20/21
Post summary
The excerpt announces two CVEs for Crypt::SaltedHash, highlighting insecure random salt values and timing attack risks, with no mention of exploit code or patch details.
⚠️⚠️⚠️ 『These versions use the built-in rand function, which is predictable and unsuitable for cryptography.』 oss-security - CVE-2026-47372: Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts https://www.openwall.com/lists/oss-security/2026/05/20/22
Post summary
The advisory announces that Crypt::SaltedHash through version 0.09 generates insecure, predictable salts due to the built‑in rand function; no exploit, patch, or PoC details are provided.