Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started
Vulnerabilities CVE-2026-13082

CVE-2026-13082

None
Open
TLP:CLEAR

GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets

AI Analysis

No AI analysis yet.

Description

GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge text used for the CAPTCHA by sampling characters from an array using Perl's built-in rand function, and generates a (by default) six-character string. The built-in rand function is unsuitable for security applications because it is predictable and reversible.

Details

EPSS Score
0.22%

12.2th percentile

Confidence
90%
Published
Jul 17, 2026
Last Modified
Jul 17, 2026
No notes yet. Click "Add Note" to create the first analysis note.
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.