CVE-2026-82560Patch

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass. Formatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-835

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-09-19); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-19: 1Mentions · 2026-10-26: 1Patch / Workaround · 2026-09-19: 1Patch / Workaround · 2026-10-26: 1Technical Details · 2026-09-19: 1Technical Details · 2026-10-26: 109-1910-26
Signal classification1 categories
Patch
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Patch

    CVE-2026-82560 Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =o… https://www.cve.org/CVERecord?id=CVE-2026-82560

    Post summary

    The text discloses CVE-2026-82560, a denial-of-service vulnerability in Perl's Pod::Text module caused by nested =over tags, and explicitly identifies version 6.1.1 as the patched release.

    00020799
    58.2K followersView on X
  • Hugo | DevOps | Cybersecurity@HugoValters
    Patch

    CVE-2026-82560: Pod::Text before 6.1.1 for Perl lets a crafted POD doc with deep =over nesting exhaust CPU and memory during formatting. CVSS 7.5. Patch under review - watch for the fix and update. #CVE #infosec #Perl https://www.valtersit.com/cve/CVE-2026-82560 #Perl #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    Post summary

    The text discloses CVE-2026-82560 as a Pod::Text resource-exhaustion vulnerability via deep =over nesting with CVSS 7.5, and notes that a patch is under review; no PoC, exploit tool, or active exploitation was reported.

    0000033
    1.1K followersView on X

Explore more