CVE-2026-6656

CVE-2026-6656CVE-2026-6656

Description

Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The check_password method uses the built-in eq operator. This allows discrepancies in timing to be used to guess the underlying hash.

Scoring

CVSS 7.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Last modified2026-07-20
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.