THREAT OPS › Threat News › CVE-2026-19487: Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass
CVE-2026-19487: Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass
<p>Posted by Stig Palmquist on Aug 13</p>========================================================================<br /> CVE-2026-19487 CPAN Security Group<br /> ========================================================================<br /> <br /> CVE ID: CVE-2026-19487<br /> Distribution: perl<br /> Versions: from 5.9.4 before 5.41.9<br /> <
Indicators of compromise
- CVE-2026-19487cve
- https://metacpan.org/dist/perlurl
Original source: https://seclists.org/oss-sec/2026/q3/480