Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitylow

SQL::Abstract before 2.000003 allows SQL injection via arrayref (CVE-2026-121265)

Original title: CVE-2026-121265: SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update

oss-security ()
Read at seclists.org
AI summary · x-ai/grok-4.7Summaries by Vani AI

Passing an arrayref column value in insert and update statements enables SQL injection in SQL::Abstract before 2.000003.

SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update.

Key facts
  • Vulnerable versions: before 2.000003
  • Perl SQL module
Security assessment · AI, from the article

Impact: SQL injection

Analyze CVE-2026-121265 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-121265
Tags
perlsqlinjection
Vendors
CPAN
Products
SQL::Abstract

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-121265
SQL Injection in SQL::Abstract before 2.000003
9.8<1%PoC

From the original article

Posted by Robert Rothenberg on Nov 07 ======================================================================== https://metacpan. org/dist/SQL-Abstract VCS Repo: ...

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.