CVE-2026-109111

UNKNOWN

Published 2026-10-24 · Source cve@gitlab.com

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Same severity, most recent

CVE-2026-89284
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
2026-10-24 · score —
CVE-2026-111326
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
2026-10-24 · score —
CVE-2026-115557
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.
2026-10-24 · score —
CVE-2026-114629
Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters. Web::Dispatch::ParamParser::get_unpacked_body_from reads an application/x-www-form-urlencoded body using a single read call, with no cap and the return value ignored. Perl's read grows the buffer to the requested length before reading, so the declared Content-Length determines the allocation. An attacker can trigger this through any route whose dispatch specification has a % body-parameter match, such as sub (POST + %name=), sending a Content-Length far larger than the body actually sent. No authentication is involved.
2026-10-24 · score —
CVE-2026-110814
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
2026-10-23 · score —