CVE-2026-9698Patch(perl / dbi)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch perl dbi systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow.

perl CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://github.com/perl5-dbi/dbi/commit/bfe5d73c162d2d1f761a639a0aa33aad6a9eb54e.patch

Vendor / third-party advisories

http://www.openwall.com/lists/oss-security/2026/06/09/9

Other references

Weakness type (CWE)

CWE-787CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 2d ago at 1 mentions (2026-06-11); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

perl

Products

dbi

Deep dive

Activity timeline3 mentions / 3d

Signal classification3 categories

Patch

133.3%

Disclosure

133.3%

General

133.3%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-11	1	Patch1
2026-06-12	1	Disclosure1
2026-07-11	1	General1

Full discourse3 posts

Open Source Security mailing list@oss_security137d
Disclosure
Perl CPAN CVE-2026-9698: DBI before 1.648 saved errors in a limited-sized buffer (can trigger a buffer overflow) https://www.openwall.com/lists/oss-security/2026/06/09/9 CVE-2009-10007: Catalyst::Plugin::Authentication before 0.10_027 is susceptible to session fixation attacks https://www.openwall.com/lists/oss-security/2026/06/09/10
Post summary
The post lists two Perl CPAN CVEs with brief technical details but lacks evidence of PoC, active exploitation, patches, or debunking.
10010297
4.6K followersView on X
Ferramentas Linux@Cezar_H_Linux137d
Patch
CVE-2026-9698 e CVE-2026-10879 no libdbi-perl podem comprometer seus servidores. Guia com verificação, script de correção e mitigação alternativa. Saiba mais: -> http://tinyurl.com/mtbe67d2 #Debian https://t.co/3A3bRZdP0M
Post summary
The post references CVE-2026-9698 and CVE-2026-10879 affecting libdbi-perl and directs readers to a guide containing a correction script and alternative mitigation.
1000045
1.5K followersView on X
IntegSec@integ_sec107d
General
CVE-2026-9698: Perl DBI Buffer Overflow Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04pffKM0
Post summary
The text presents a headline about CVE-2026-9698, identifying it as a Perl DBI buffer overflow with no further detail on exploits, patches, or active use.
0000045
31 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	perl	dbi	-	-	-

Explore more

Back to dashboard perl CVEs dbi vulnerabilities