CVE-2026-97230: IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL
Malicious Perl package IO::Socket::SSL::SelfCertificate 1.00 (CVE-2026-97230) executes Python from an obfuscated URL.
Robert Rothenberg reported that IO::Socket::SSL::SelfCertificate version 1.00 for Perl contains malware, tracked as CVE-2026-97230. The package executes Python code retrieved from an obfuscated URL. The distribution is listed on MetaCPAN. The oss-security post does not describe confirmed compromise of downstream users.
- Only version 1.00 of the Perl distribution is named
- Payload executes Python fetched from an obfuscated URL
- Tracked as CVE-2026-97230
- Published on MetaCPAN and reported to oss-security
- CVEs
- CVE-2026-97230
- Products
- IO::Socket::SSL::SelfCertificate
- Organizations
- MetaCPAN
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-97230 | Malicious Remote Code Execution in Perl Module IO::Socket::SSL::SelfCertificate 1.00 | 9.8 | — |
From the original article
Posted by Robert Rothenberg on Sep 24 ======================================================================== https://metacpan. org/dist/IO-Socket-SSL-SelfCertificate...
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.