Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

Vulnerability IntelligenceCVE-2026-11702

CVE-2026-11702

HIGH7.5

Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes

Published Jun 26, 2026

Modified 2 weeks ago

Details

Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes.

When an object is initialised before forking, then the internal state for the PRNG is shared across processes and identical random streams will be produced.

Secrets generated in multiprocess applications are predictable across processes.

References

WEB

https://github.com/daoswald/Bytes-Random-Secure-Tiny/issues/6

WEB

https://github.com/daoswald/Bytes-Random-Secure-Tiny/pull/7

FIX

https://security.metacpan.org/patches/B/Bytes-Random-Secure-Tiny/1.011/CVE-2026-11702-r1.patch

WEB

https://www.cve.org/CVERecord?id=CVE-2026-11625

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-11702

WEB

https://www.cve.org/CVERecord?id=CVE-2026-41564

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness Type (CWE)

Other

CWE-335

Ecosystems

Timeline

PublishedJun 26, 2026

ModifiedJul 1, 2026

CVE-2026-11702 | Mondoo Vulnerability Intelligence