VULNERABILITY INTELLIGENCE

CVE-2026-85644

CVSS score7.5 HIGH

EPSS probability0.21%

CISA KEVNot currently listed

Published2026-09-28

Last modified2026-09-30

Description

XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS::Parse::Infix generates for a list-associative infix operator checks whether arguments are array references, but it tests using SvRV() rather than SvROK(). SvRV() reads a union sl... .