Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-110680— Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv

Quick assessment

Affected
CVE-2026-110680
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Perl 上的 Cpanel::JSON::XS 模块在 4.20 至 4.80 版本之间（不含 4.80），当在 函数执行规范化编码（canonical encoding）过程中，遇到绑定（tied）或共享（threads::shared）的哈希表发生扩容时，会触发越界写入漏洞。 在启用 选项时，编码器会先统计绑定或共享哈希的键数量，随后进行第二次遍历以收集键并排序。该编码器使用一个固定大小为 64 的栈数组；若键数量更大，则根据首次遍历的结果动态分配一个堆数组。如果第二次遍历的实际键数量超过了该数组的容量，则在

AI Predicted 7.5 Difficulty: Moderate

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
None None 4.20< 4.80 affected

I. Basic Information for CVE-2026-110680

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv
Source: CVE Program / CVE List V5
Vulnerability Description
Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv. With canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed 64-entry stack array or, for larger counts, a heap array sized from the first pass. If the second pass exceeds that capacity, entries are written out of bounds before the counts are compared. This corrupts stack or heap memory and can crash the process.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 4.20 ~ 4.80 -

II. Public POCs for CVE-2026-110680

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-110680

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-110680 (1)

Other References for CVE-2026-110680 (1)

IV. Related Vulnerabilities

Same weakness: CWE-787

V. Comments for CVE-2026-110680

No comments yet

Leave a comment