QwikSec

Security Database

CVE

CWE

Training

CVE-2025-15638

Published: Apr 21, 2026

Modified: Apr 21, 2026

PUBLISHED

Description

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437.

Vendor	Product	Versions
ATRODO	Net::Dropbear	affected `0 - < 0.14`

Weaknesses (CWE)

References

https://www.cve.org/CVERecord?id=CVE-2016-6129

vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2018-12437

vendor-advisory

https://metacpan.org/release/ATRODO/Net-Dropbear-0.14/source/dropbear/libtomcrypt/changes

release-notes

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.