CVE-2026-11625
Published: 26 June 2026
Summary
CVE-2026-11625 is a high-severity PRNG (CWE-335) vulnerability. Its CVSS base score is 7.5 (High).
Operationally, ranked at the 22.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-39640
Vulnerability details
Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before forking, or when the functional interface is used, then the internal state for the PRNG is shared across processes and identical random…
more
streams will be produced. Secrets generated in multiprocess applications are predictable across processes.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.