CVE-2026-19954: Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names
AI summary · grok-4.7Summaries by Vani AI
Perl Net::Whois::Raw before 2.99044 queries WHOIS for the wrong domain on Unicode names.
Robert Rothenberg disclosed CVE-2026-19954 in the Perl Net::Whois::Raw distribution on CPAN. Versions before 2.99044 ship a pwhois command-line tool that looks up the wrong domain when the input is a Unicode domain name. The oss-security post does not report in-the-wild exploitation.
Key facts
- Affects Net::Whois::Raw before 2.99044.
- pwhois queries WHOIS for the wrong domain on Unicode names.
- No exploitation is reported in the advisory.
- CVEs
- CVE-2026-19954
- Products
- Net::Whois::Rawpwhois
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-19954 | Wrong-domain WHOIS lookup in Perl pwhois | 5.4 | — |
From the original article
Posted by Robert Rothenberg on Oct 05 ======================================================================== https://metacpan. org/dist/Net-Whois-Raw VCS Repo: ...
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.