Vulnerability in Rrwo Plack::middleware::security::common
CVE-2026-9658
Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths. The header injection rule was ineffective at blocking header injections in the request paths unless they were double-enc…
EPSS: 0.001 (17.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Rrwo Plack::middleware::security::common — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-9658?
- CVE-2026-9658 is a high-severity vulnerability in Rrwo Plack::middleware::security::common, classified under HTTP Response Splitting. CVSS score: 7.3/10. Published 2026-05-28.
- How severe is CVE-2026-9658?
- High severity. CVSS v3 base score is 7.3 out of 10.