THREATOPS

THREAT OPS › Threat News › CVE-2026-18536: Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP

CVE-2026-18536: Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP

medoss_secPublished 2026-08-01

Posted by Robert Rothenberg on Aug 01======================================================================== CVE-2026-18536 CPAN Security Group ======================================================================== CVE ID: CVE-2026-18536 Distribution: Data-Entropy Versions: before 0.010

Indicators of compromise

CVE-2026-18536cve
https://metacpan.org/dist/Data-Entropyurl

Original source: https://seclists.org/oss-sec/2026/q3/379

Same event, other sources

[NVD] CVE-2026-18536 — Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. The Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo remote sources are accessed over plain HTTP. The Data::Entropy::RawSource::RandomOrg integrity checknvd · 2026-08-01