Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-110681— Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread

Quick assessment

Affected
CVE-2026-110681
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Perl 环境中，Cpanel::JSON::XS 4.80 之前的版本存在以下问题：当解析器对象被克隆到新的子线程（ithread）中时，该解析器会错误地使用父解释器的标量（scalar）。 解析器对象将其回调函数和增量解析缓冲区以原始标量指针的形式存储。在创建新线程时，这些指针会被原样复制到新解释器中，导致子线程中的解析器使用了属于父解释器的标量，并可能在父解释器已释放这些标量后再次尝试释放它们。 如果在启动线程之前创建了解析器，并在该线程内部使用它，则可能触发以下后果：调用已被释放的回调函数、破坏引用计数，最

AI Predicted 9.8 Difficulty: Moderate

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
None None < 4.80 affected

I. Basic Information for CVE-2026-110681

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread
Source: CVE Program / CVE List V5
Vulnerability Description
Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread. A parser object holds its callbacks and its incremental parse buffer as raw scalar pointers. When a thread is created, these are copied into the new interpreter unchanged, so the child's parser uses, and later frees, scalars that belong to the parent and may already have been freed there. A parser created before a thread starts and used inside it can call freed callbacks, corrupt reference counts and crash the process.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 0 ~ 4.80 -

II. Public POCs for CVE-2026-110681

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-110681

请登录查看更多情报信息。

Other References for CVE-2026-110681 (2)

IV. Related Vulnerabilities

Same weakness: CWE-416

V. Comments for CVE-2026-110681

No comments yet

Leave a comment