HighVulnerabilityCVE-2026-78188updated 31 Oct 2026, 19:15 UTC
WebDyne for Perl: path traversal runs out-of-root .psp files; cookie and XSS flaws
1 source, unconfirmed
| Severity | HighVulnerability |
|---|---|
| Being exploited? | UnclearNo reports either way yet |
| Fix available? | UnclearNo fixed version published in the sources yet |
| How sure is this? | 1 source, unconfirmedOnly one publisher so far, details may change |
Timeline
- 31 Oct 2026, 19:01 UTCPublicly disclosed
- 31 Oct 2026, 19:01 UTCReported by oss-security · oss-security
- 31 Oct 2026, 19:15 UTCPicked up by Zero Radar
Sources 1 report, oldest first
Security researchers research teams and mailing lists
- WebDyne for Perl (5 CVEs)oss-security · 31 Oct 2026, 19:01 UTC
Technical details
- ID
- CVE-2026-78188
- Disclosed
- 31 Oct 2026, 19:01 UTC
- On Zero Radar
- 31 Oct 2026, 19:15 UTC (14 min after disclosure)
- Last change
- 31 Oct 2026, 19:15 UTC
This entry has not been explained yet. The text comes straight from the source. How Zero Radar works