CVE-2026-11526

Public on 2026-06-12
Modified on 2026-06-12
Description
command injection via 2-arg open() in _make_filehandle
Severity
Important severity
Important
See what this means
CVSS v3 Base Score
8.4
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2 - Core perl-GD Pending Fix
Amazon Linux 2023 perl-GD Pending Fix

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H