Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-110686— Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv

Quick assessment

Affected
CVE-2026-110686
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Perl 环境中，版本早于 4.80 的 Cpanel::JSON::XS 模块在 函数执行解码时，若某个过滤器在解码过程中移除了自身，会导致已释放的过滤器回调函数被再次使用。 具体而言， 操作在复制解析器的 和 回调时，未对这些回调函数建立引用计数。当某个过滤器回调移除了最后一个单键过滤器时，回调函数表会被释放，而此时正在进行的解码操作仍在使用该表。随后，下一个对象将被分发到已释放的内存区域，从而可能导致进程崩溃。

AI Predicted 8.1 Difficulty: Moderate

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
None None < 4.80 affected

I. Basic Information for CVE-2026-110686

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv
Source: CVE Program / CVE List V5
Vulnerability Description
Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv. A decode copies the parser's filter_json_object and filter_json_single_key_object callbacks without taking references to them. A filter callback that removes the last single-key filter frees the callback table while the decode in progress still uses it. The next object is dispatched through freed memory and can crash the process.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 0 ~ 4.80 -

II. Public POCs for CVE-2026-110686

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-110686

请登录查看更多情报信息。

Other References for CVE-2026-110686 (2)

IV. Related Vulnerabilities

Same weakness: CWE-416

V. Comments for CVE-2026-110686

No comments yet

Leave a comment