MediumVulnerabilityCVE-2026-74760updated 1 Nov 2026, 18:01 UTC
Google::Auth Perl: SSRF via credential_source URLs; missing OAuth state check
1 source, unconfirmed
| Severity | MediumVulnerability |
|---|---|
| Being exploited? | UnclearNo reports either way yet |
| Fix available? | UnclearNo fixed version published in the sources yet |
| How sure is this? | 1 source, unconfirmedOnly one publisher so far, details may change |
Timeline
- 1 Nov 2026, 17:58 UTCPublicly disclosed
- 1 Nov 2026, 17:58 UTCReported by oss-security · oss-security
- 1 Nov 2026, 18:01 UTCPicked up by Zero Radar
Sources 1 report, oldest first
Security researchers research teams and mailing lists
- Google::Auth for Perl (2 CVEs)oss-security · 1 Nov 2026, 17:58 UTC
Technical details
- ID
- CVE-2026-74760
- Disclosed
- 1 Nov 2026, 17:58 UTC
- On Zero Radar
- 1 Nov 2026, 18:01 UTC (3 min after disclosure)
- Last change
- 1 Nov 2026, 18:01 UTC
This entry has not been explained yet. The text comes straight from the source. How Zero Radar works