Back to search
CVE-2026-8647
Published: May 26, 2026
Modified: May 28, 2026
PUBLISHED
Description
Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available. The random_bytes function fell back to using the built-in rand() function when none of the Perl modules Crypt::PRNG, Crypt::OpenSSL::Random, Net::SSLeay, Crypt::Random, or Bytes::Random::Secure were available.
| Vendor | Product | Versions |
|---|---|---|
MIK | Crypt::ScryptKDF | affected 0 - <= 0.010 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now