Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

HTTP::Session for Perl vulnerable to memcached command injection

Original title: CVE-2026-13575: HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI

oss-security ()
Read at seclists.org
AI summary · x-ai/grok-4.7Summaries by Vani AI

Affects versions before 0.54; no fixed version or exploitation stated.

HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI.

Key facts
  • Affected versions before 0.54
  • Vulnerable to memcached command injection
  • No fixed version or exploitation mentioned
Analyze CVE-2026-13575 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-13575
Tags
http-sessionperlmemcachedcommand-injection
Products
HTTP::Session

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-13575
Memcached command injection in HTTP::Session before 0.54 for Perl
——

From the original article

Posted by Robert Rothenberg on Nov 01 ======================================================================== https://metacpan. org/dist/http-session VCS Repo: ...

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.