Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-118991— CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key

Quick assessment

Affected
CVE-2026-118991
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Perl 版本的 CallBackery 在 0.62.0 之前，使用经过填充的密码作为 AES 密钥来加密配置备份。 函数通过向备份密码末尾填充字符"x"，并将其截断为 32 字节来生成 AES 密钥，该过程未使用盐值（salt），也未进行密钥派生。由于备份数据的第一个块包含一个由 16 个十六进制数字组成的长度字段，攻击者只需解密一个数据块即可验证密码猜测的正确性，且验证速度等同于原始 AES 加解密速度。 一旦攻击者获取了备份文件，便可通过快速离线暴力猜测恢复其密码，进而窃取该备份中存储的所有凭据。

AI Predicted 8.1 Difficulty: Moderate EPSS 0.10% · P1

Affected Version Matrix 1

VendorProduct Version RangeStatus
None None < 0.62.0 affected

I. Basic Information for CVE-2026-118991

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key
Source: CVE Program / CVE List V5
Vulnerability Description
CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key. getCrypt() pads the backup password with "x" characters and cuts it to 32 bytes to form the AES key, with no salt and no key derivation. The first block of a backup holds a 16 hex digit length field, so decrypting one block confirms a password guess at raw AES speed. An attacker who obtains a backup can recover its password by fast offline guessing, and with it every credential the backup holds.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
使用具有不充分计算复杂性的口令哈希
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 0 ~ 0.62.0 -

II. Public POCs for CVE-2026-118991

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-118991

请登录查看更多情报信息。

Other References for CVE-2026-118991 (1)

IV. Related Vulnerabilities

Same weakness: CWE-916