https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:25:22 +0000 https://cve.radiocsirt.org/vuln/cve-2026-5083 <p><strong>Affected:</strong> BEROV Ado::Sessions</p> <p>Ado::Sessions versions through 0.935 for Perl generates insecure session ids.</p> <p>The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.</p> <p>Predicable session ids could allow an attacker to gain access to systems.</p> <p>Note that Ado is no longer maintained, and has been removed from the CPAN index. It is still available on BackPAN.</p> <p><strong>Affected:</strong> BEROV Ado::Sessions</p> <p>Ado::Sessions versions through 0.935 for Perl generates insecure session ids.</p> <p>The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.</p> <p>Predicable session ids could allow an attacker to gain access to systems.</p> <p>Note that Ado is no longer maintained, and has been removed from the CPAN index. It is still available on BackPAN.</p> https://cve.radiocsirt.org/vuln/cve-2026-5083