Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-116531— HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk

Quick assessment

Affected
CVE-2026-116531
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Perl 的 HTTP::Body 模块在 1.23_01 版本之前存在缺陷：当读取操作在分块（chunked）请求体的某个分块中间结束时，该模块会丢失分块边界信息。 在分块模式下（即未提供 Content-Length 时），add() 方法一旦缓冲区长度达到分块声明的大小，就认为该分块已完成，但此时缓冲区中仍包含该分块的“分块大小行”（chunk-size line）。若读取操作恰好在某个分块的最后几个字节处结束，add() 会误将该分块截短，并将剩余数据解析为下一个分块的大小行。 远程攻击者可利用此缺陷，构造

AI Predicted 7.5 Difficulty: Easy

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
None None < 1.23_01 affected

I. Basic Information for CVE-2026-116531

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk
Source: CVE Program / CVE List V5
Vulnerability Description
HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk. In chunked mode, used when no content length is given, add() treats a chunk as complete once the buffer is as long as the chunk's declared size, but the buffer still holds the chunk-size line. When a read ends in the last bytes of a chunk, add() takes the chunk short and parses the leftover data as the next chunk-size line. A remote attacker can make a chunked body never complete, hanging a server that reads until the body is done, and may make it complete early, leaving the remaining bytes to be read as the next request.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
长度参数不一致性处理不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 0 ~ 1.23_01 -

II. Public POCs for CVE-2026-116531

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-116531

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-116531 (1)

Vendor Pages for CVE-2026-116531 (1)

IV. Related Vulnerabilities

Same weakness: CWE-130