{"id":"CVE-2026-118991","aliases":[],"cve":{"records":[{"id":"CVE-2026-118991","source":"CPANSec","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-29T10:58:47.285Z","published":"2026-10-30T13:12:13.128Z","modified":"2026-11-06T16:50:25.145Z"}],"publishers":[{"name":"CPANSec","role":"CNA","organizationId":"9b29abf9-4ab0-4765-b253-1875cd9b441e","modified":"2026-10-30T13:12:13.128Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-06T16:50:25.145Z"}],"references":[{"url":"https://metacpan.org/release/OETIKER/CallBackery-0.62.0/changes","tags":["release-notes"],"source":"CPANSec"}],"weaknesses":[{"id":"CWE-916","description":"CWE-916 Use of Password Hash With Insufficient Computational Effort","source":"CPANSec"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-06T16:49:57.530049Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key","titleSource":"CPANSec","descriptionSource":"CPANSec","description":"CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key.\n\ngetCrypt() pads the backup password with \"x\" characters and cuts it to 32 bytes to form the AES key, with no salt and no key derivation. The first block of a backup holds a 16 hex digit length field, so decrypting one block confirms a password guess at raw AES speed.\n\nAn attacker who obtains a backup can recover its password by fast offline guessing, and with it every credential the backup holds.","score":7.5,"severity":"high","published":"2026-10-30T13:12:13.128Z","modified":"2026-11-06T16:50:25.145Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"","name":"CallBackery","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"0.62.0","versionType":"custom"}],"defaultStatus":"unaffected","packageURL":"pkg:cpan/CallBackery","cpes":[],"source":"CPANSec","url":"https://www.cve.org/CVERecord?id=CVE-2026-118991"}],"remediation":[{"text":"Upgrade to CallBackery 0.62.0 or later.","source":"CPANSec","url":"https://www.cve.org/CVERecord?id=CVE-2026-118991"}],"references":["https://metacpan.org/release/OETIKER/CallBackery-0.62.0/changes"],"sources":[{"name":"CVE","id":"CVE-2026-118991","modified":"2026-11-06T16:50:25.145Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-118991"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":7.5}],"sourceAffected":[],"observedAt":"2026-11-06T18:04:00.262Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:25:31.038Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T15:55:34.289Z","attemptedAt":"2026-10-30T15:55:34.289Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-30T15:55:34.859Z","attemptedAt":"2026-10-30T15:55:34.859Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T15:55:35.123Z","attemptedAt":"2026-10-30T15:55:35.123Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T15:55:34.437Z","attemptedAt":"2026-10-30T15:55:34.437Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-118991","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118991","modified":"2026-10-30T13:18:31.880","checkedAt":"2026-10-30T15:55:34.289Z"},{"source":"GitHub Advisory Database","id":"GHSA-8xrx-f9pw-qp4w","url":"https://github.com/advisories/GHSA-8xrx-f9pw-qp4w","modified":"2026-10-30T15:34:39Z","checkedAt":"2026-10-30T15:55:34.859Z"},{"source":"ENISA EUVD","id":"EUVD-2026-113919","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113919","modified":"Oct 30, 2026, 1:12:13 PM","checkedAt":"2026-10-30T15:55:35.123Z"}],"aiSummary":{"text":"CallBackery versions before 0.62.0 for Perl use the padded password as the AES key to encrypt configuration backups, allowing an attacker with access to a backup to recover its password through fast offline guessing. The weakness is due to insufficient computational effort in password hashing. This affects all versions before 0.62.0.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T15:11:07.341Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-118991"}]}}