CVE-2026-8704Disclosure

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-552

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-05-16); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

Open Source Security mailing list@oss_security141d
Disclosure
Perl CPAN CVE-2026-8700: Crypt::DSA before 1.20 generate seeds using rand https://www.openwall.com/lists/oss-security/2026/05/15/26 CVE-2026-8704: Crypt::DSA through 1.19 use 2-args open, allowing existing files to be modified https://www.openwall.com/lists/oss-security/2026/05/15/27
Post summary
The text announces two CVEs in Crypt::DSA: CVE‑2026‑8700 relates to predictable seed generation using rand, while CVE‑2026‑8704 allows file modification via a 2‑args open flaw.
10010113
4.6K followersView on X
CVE@CVEnew145d
Disclosure
CVE-2026-8704 Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified. https://www.cve.org/CVERecord?id=CVE-2026-8704
Post summary
The CVE impacts Perl’s Crypt::DSA (v1.19 and earlier) by allowing existing files to be modified via a 2‑argument open flaw, with no reports of active exploitation or patch details.
00000140
57.5K followersView on X

Explore more

Back to dashboard