CVE-2026-78192

LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page. WebDyne's wrapper scripts, such as webdyne.psgi, enable the built-in index page by default. Its source viewer returns files under the document root named in the source parameter of an HTMX request, including .psp, .pm and .pl files. A remote attacker can read the application's Perl code, including the __PERL__ blocks of .psp pages and any credentials they hold.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://metacpan.org/release/ASPEER/WebDyne-3.022/changes

Weakness type (CWE)

CWE-540CWE-1188

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-78192

Full discourse2 posts

VulDB 🛡@vuldb15h
🚨 It is possible to see elevated activities targeting WebDyne (CVE-2026-78192) vuldb.com/vuln/429562/cti https://t.co/GqDmOBH555
0000035
2.3K followersView on X
CVE@CVEnew1d
CVE-2026-78192 WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page. WebDyne's wrapper … https://www.cve.org/CVERecord?id=CVE-2026-78192
00000469
58.6K followersView on X

Explore more

Back to dashboard