CVE-2026-6659

Description

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography.

Affected Platforms

Weakness Type

CWE-338

References

• https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b022…
• https://github.com/ronsavage/Crypt-PasswdMD5/pull/3
• https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/Passw…
• https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes
• http://www.openwall.com/lists/oss-security/2026/05/08/17