Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-113812— Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates

Quick assessment

Affected
CVE-2026-113812
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Perl 环境中，20261020 版本之前的 Mozilla::CA 模块提供的证书颁发机构（CA）证书捆绑包中包含一个根证书，该根证书与已被泄露的中间证书相关联。 该捆绑包包含了"emSign ECC Root CA - G3"，它为那些私钥已公开泄露的中间证书提供了信任路径。 能够拦截或重定向客户端流量的攻击者可以利用这些私钥来冒充 TLS 服务器，实施中间人攻击。 LWP、HTTP::Tiny 以及其他客户端通常使用 IO::Socket::SSL 模块，该模块会优先在 OpenSSL 的默认位置查找

AI Predicted 7.5 Difficulty: Moderate

I. Basic Information for CVE-2026-113812

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates
Source: CVE Program / CVE List V5
Vulnerability Description
Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", which provides a trust path for intermediate certificates whose private keys are publicly available. An attacker able to intercept or redirect client traffic may use these keys to impersonate a TLS server. LWP, HTTP::Tiny and other clients normally use IO::Socket::SSL, which looks for CA certificates in OpenSSL's default locations before falling back to Mozilla::CA. Configuration and environment variables can override this selection. Users should check which CA store their client uses. If it uses the system store, check for and install the operating system vendor's updates for this incident.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
证书验证不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 0 ~ 20261020 -

II. Public POCs for CVE-2026-113812

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-113812

请登录查看更多情报信息。

Other References for CVE-2026-113812 (4)

IV. Related Vulnerabilities

Same weakness: CWE-295

V. Comments for CVE-2026-113812

No comments yet

Leave a comment