{"id":"CVE-2026-118992","aliases":[],"cve":{"records":[{"id":"CVE-2026-118992","source":"CPANSec","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-29T10:58:47.285Z","published":"2026-10-30T13:11:55.375Z","modified":"2026-10-30T19:08:35.108Z"}],"publishers":[{"name":"CPANSec","role":"CNA","organizationId":"9b29abf9-4ab0-4765-b253-1875cd9b441e","modified":"2026-10-30T13:11:55.375Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-30T19:08:35.108Z"}],"references":[{"url":"https://metacpan.org/release/OETIKER/CallBackery-0.62.0/changes","tags":["release-notes"],"source":"CPANSec"}],"weaknesses":[{"id":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command","source":"CPANSec"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-30T19:08:31.788779Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup","titleSource":"CPANSec","descriptionSource":"CPANSec","description":"CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup.\n\nrestoreConfigBlob() feeds the database dump in a backup to the sqlite3 command-line shell. The shell runs lines starting with a dot as its own commands, so .shell or .system in the dump runs an OS command and .load loads native code.\n\nAnyone who can supply a backup to be restored can run arbitrary commands as the application user.","score":8.4,"severity":"high","published":"2026-10-30T13:11:55.375Z","modified":"2026-10-30T19:08:35.108Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"","name":"CallBackery","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"0.62.0","versionType":"custom"}],"defaultStatus":"unaffected","packageURL":"pkg:cpan/CallBackery","cpes":[],"source":"CPANSec","url":"https://www.cve.org/CVERecord?id=CVE-2026-118992"}],"remediation":[{"text":"Upgrade to CallBackery 0.62.0 or later.","source":"CPANSec","url":"https://www.cve.org/CVERecord?id=CVE-2026-118992"}],"references":["https://metacpan.org/release/OETIKER/CallBackery-0.62.0/changes"],"sources":[{"name":"CVE","id":"CVE-2026-118992","modified":"2026-10-30T19:08:35.108Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-118992"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.4}],"sourceAffected":[],"observedAt":"2026-10-30T19:54:54.737Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T14:00:31.626Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T15:55:35.155Z","attemptedAt":"2026-10-30T15:55:35.155Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-30T15:55:36.018Z","attemptedAt":"2026-10-30T15:55:36.018Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T15:55:35.958Z","attemptedAt":"2026-10-30T15:55:35.958Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T15:55:35.254Z","attemptedAt":"2026-10-30T15:55:35.254Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-118992","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118992","modified":"2026-10-30T13:18:31.990","checkedAt":"2026-10-30T15:55:35.155Z"},{"source":"ENISA EUVD","id":"EUVD-2026-113918","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113918","modified":"Oct 30, 2026, 1:11:55 PM","checkedAt":"2026-10-30T15:55:35.958Z"},{"source":"GitHub Advisory Database","id":"GHSA-w32m-6wp6-8542","url":"https://github.com/advisories/GHSA-w32m-6wp6-8542","modified":"2026-10-30T15:34:31Z","checkedAt":"2026-10-30T15:55:36.018Z"}],"aiSummary":{"text":"CallBackery for Perl, versions before 0.62.0, allows OS command execution via sqlite3 shell commands in a restored configuration backup. An attacker with access to supply a backup can run arbitrary commands as the application user. The weakness is improper neutralization of special elements used in an OS command.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T15:11:10.225Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-118992"}]}}