Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-120636— CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and start_form

Quick assessment

Affected
CVE-2026-120636
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Perl 的 CGI 模块 5.00 之前的版本存在漏洞，允许通过基于 构建的 和 函数中的 URL，实施开放重定向（open redirect）和脚本注入攻击。 具体而言， 、 以及 的默认 属性，均直接使用客户端提供的 构建，且未进行任何验证。这可能导致生成的 URL 呈现以下形式： 协议相对路径（例如 ） 绝对路径形式（例如 ） 包含反斜杠 此外，当使用 时，甚至可能返回以 开头的 URL。由此生成的链接和表单提交请求可能被导向至其他主机，从而引发安全风险。

AI Predicted 6.5 Difficulty: Trivial

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

I. Basic Information for CVE-2026-120636

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and start_form
Source: CVE Program / CVE List V5
Vulnerability Description
CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and start_form. url(-absolute=>1), url(-relative=>1) and the default start_form action are built from the client-supplied REQUEST_URI without validation. The result can be protocol-relative (//evil.example), absolute-form (http://evil.example/) or contain backslashes, and url(-relative=>1) can return a javascript: URL. Links and form posts built from these URLs can go to another host.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 0 ~ 5.00 -

II. Public POCs for CVE-2026-120636

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-120636

请登录查看更多情报信息。

Other References for CVE-2026-120636 (3)

IV. Related Vulnerabilities

Same weakness: CWE-601