VULNERABILITY INTELLIGENCE
CVE-2026-46720
CVSS score8.2 HIGH
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-05-17
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Description
Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
Weakness classification
- 9b29abf9-4ab0-4765-b253-1875cd9b441e: CWE-93