ASPEER vulnerabilities

Products

• WebDyne::Session 1

Latest ASPEER CVEs

Newest publication first

1. CVE-2026-5084 WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely

   Published 2026-05-11

   Medium·CVSS 6.5

   WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely. The session handler generates the session id from an MD5 hash seeded with a call to the built-in rand() function. The rand function is passed a maximum value based on the process id, the epoch...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.