VULNERABILITY INTELLIGENCE
CVE-2026-3257
CVSS score9.8 CRITICAL
EPSS probability0.46%
CISA KEVNot currently listed
Published2026-03-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library. UnQLite for Perl embeds the UnQLite library. Version 0.06 and earlier of the Perl module uses a version of the library from 2014 that may be vulnerable to a heap-based overflow.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- 9b29abf9-4ab0-4765-b253-1875cd9b441e — Release Notes
- 9b29abf9-4ab0-4765-b253-1875cd9b441e — Product
- 9b29abf9-4ab0-4765-b253-1875cd9b441e — Third Party Advisory