CVE-2026-46719

MEDIUM EPSS 22.2%

Published May 16, 20261mo ago · Modified Jun 19, 20261w ago

6.5 CVSS 3.1

Medium

Published May 16, 2026 1mo ago

Last Modified Jun 19, 2026 1w ago

Description

Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

CVSS Details

Base Score

6.5

Exploitability

3.9

Impact

2.5

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality Low

Integrity Low

Availability None

Threat Intelligence

EPSS Exploit Probability

22.2% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 2

CWE-150

CWE-93

References 3

openwall.com http://www.openwall.com/lists/oss-security/2026/05/16/9
github.com https://github.com/robrwo/Net-Statsd-Lite/commit/e1a8ab866d75c2827982134e9cf7e51a7f771153.patch
metacpan.org https://metacpan.org/release/RRWO/Net-Statsd-Lite-v0.9.0/changes

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.