CWE-506

CWE-506 · 3 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-506, highest CVSS first.

  1. CRITICAL 9.8CVE-2026-972302026-09-24

    IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generate_certificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcode…

    AI risk analysis on Exploit-DB.ai →

  2. CRITICAL 9.8CVE-2026-66747public PoC2026-08-05

    Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line. It is the open-source ycsunjane/rctl tool built in as an OpenWrt package (librctl.so), started at boot and run as root und…

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 7.8CVE-2026-958312026-09-22

    Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL. The generate_certificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a …

    AI risk analysis on Exploit-DB.ai →