CVE-2026-8700

CVE-2026-8700: Crypt::DSA versions before 1.20 for Perl generate seeds using rand

Vendor Timlegge

Product Crypt::DSA

Weakness CWE-331

Published May 15, 2026

Last update May 18, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.

Key dates

02Disclosure timeline

May 15, 2026 CVE published

May 18, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-8700 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/331.html

Related vulnerabilities

04Related CVE

CVE-2025-52464 Meshtastic Repeated Public and Private Keypairs CVE-2025-14972 Insufficient DPA countermeasure reseeding CVE-2022-43755 Rancher: Non-random authentication token CVE-2025-14261 Lack of entropy allows registered low-privileged users of Litmus to crack valid JWT tokens and gain admin privileges CVE-2025-13399 Insecure Encryption in Communication with the Web Interface on TP-Link VX800v