Cyber Resilience

CVE-2026-9641

Crypto Weakness

Published
12 June 2026
Modified
17 June 2026
CVSS Score v3.1 5.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score 0.0023 13th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2026-9641 is a medium-severity Use of Password Hash With Insufficient Computational Effort (CWE-916) vulnerability. Its CVSS base score is 5.3 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Password Cracking (T1110.002); ranked at the 13th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to SC-13 (Cryptographic Protection) and SI-2 (Flaw Remediation) — see the control section below for these in your framework.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability Data

Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations. The default algorithm is HMAC-SHA1, which should only be used for legacy systems. These versions default to using 1000 iterations. Depending on the chosen algorithm,…

more

220,000 to 1,400,000 iterations should be used.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1110.002 Password Cracking Credential Access
Adversaries may use password cracking to attempt to recover usable credentials, such as plaintext passwords, when credential material such as password hashes are obtained.
Why these techniques?

Weak PBKDF2 defaults enable offline password cracking of stored hashes.

Confidence: MEDIUM · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2026-25861Shared CWE-916
CVE-2026-44611Shared CWE-916
CVE-2026-5040Shared CWE-916
CVE-2026-57310Shared CWE-916
CVE-2026-55069Shared CWE-916
CVE-2026-45027Shared CWE-916
CVE-2023-0567Shared CWE-916
CVE-2024-25607Shared CWE-916
CVE-2025-2265Shared CWE-916
CVE-2025-41692Shared CWE-916

Affected Assets

PBKDF2
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • SC-13 Cryptographic Protection
  • SI-2 Flaw Remediation
  • CM-6 Configuration Settings
Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)
  • V11.4.2

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly requires selection and use of approved cryptographic algorithms and parameters (e.g., PBKDF2 with strong hash and high iteration count) instead of the weak HMAC-SHA1/1000-iteration defaults.

prevent

Mandates timely installation of updates that replace the vulnerable Crypt::PBKDF2 defaults with secure iteration counts and algorithms.

prevent

Requires configuring the module's algorithm and iteration parameters to organizationally approved values that exceed the weak library defaults.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.DS-01 mostly match
prevents

Proper password hashing is a direct instance of using cryptographic hashes to protect data-at-rest.

PR.PS-06 mostly match
prevents

Secure development practices explicitly include selection and configuration of strong, computationally expensive password hashes.

PR.AA-03 partial match
prevents

Authentication policies may reference password handling but do not address storage or computational cost of hashes.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

degrades

Requires secure handling of authentication information, which includes choosing strong password hashing schemes.

prevents

Requires appropriate use of cryptography, which encompasses selecting strong hashing algorithms for passwords.

prevents

Secure coding practices include implementing password storage with adequate computational effort.

degrades

Mandates secure authentication mechanisms, directly addressing the need for computationally strong password hashes.

References