https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:54:22.011002+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-47372 CVE-2026-47372 — Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts 2026-10-07T10:54:22.013606+00:00

Affected: RRWO Crypt::SaltedHash

Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts.

These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

 https://cve.radiocsirt.org/vuln/usn-8418-1 USN-8418-1 — libcrypt-saltedhash-perl vulnerability 2026-10-07T10:54:22.013662+00:00

Affected: Ubuntu:Pro:16.04:LTS: libcrypt-saltedhash-perl, Ubuntu:Pro:18.04:LTS: libcrypt-saltedhash-perl, Ubuntu:Pro:20.04:LTS: libcrypt-saltedhash-perl, Ubuntu:Pro:22.04:LTS: libcrypt-saltedhash-perl, Ubuntu:Pro:24.04:LTS: libcrypt-saltedhash-perl, Ubuntu:25.10: libcrypt-saltedhash-perl, Ubuntu:Pro:26.04:LTS: libcrypt-saltedhash-perl

It was discovered that Crypt-SaltedHash incorrectly generated salts using a cryptographically weak pseudo-random number generator. An attacker could possibly use this issue to predict generated salts, leading to a weakening of cryptographic protections.