VulDB 🛡@vuldb
🚨 A lot of offensive activities were identified targeting ASPEER WebDyne (CVE-2026-78191) vuldb.com/vuln/429566/cti https://t.co/L4NQw5wiOX
0000061
2.3K followersView on X
CVE-2026-78191
LOWSignal is active with 2 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne decides whether to run a requested file as a page by matching its name against WEBDYNE_PSP_EXT_RE, which has no end anchor. An application that accepts uploads by checking only the final extension lets a remote attacker upload a file such as report.psp.pdf and run its embedded Perl by requesting it.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-777
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 2 mentions across 1 observed day
What's happening
- 2 total mentions across 1 day
Deep dive
Activity timeline2 mentions / 1d
Referenced assets1 URL
By indicator
Full discourse2 posts
CVE@CVEnewCVE-2026-78191 WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne decides whether to run a requested file as a pa… https://www.cve.org/CVERecord?id=CVE-2026-78191
0000049158.6K followersView on X