CVE-2026-5085

Solstice::Session versions through 1440 for Perl generates session ids insecurely. The _generateSessionID method returns an MD5 digest seeded by the epoch time, a random hash reference, a call to the built-in rand() function and the process id. The same method is used in the _generateID method in Solstice::Subsession, which is part of the same distribution. The epoch time may be guessed, if it is not leaked in the HTTP Date header. Stringified hash refences will contain predictable content. The built-in rand() function is seeded by 16-bits and is unsuitable for security purposes. The process id comes from a small set of numbers. Predictable session ids could allow an attacker to gain access to systems.

• CWE-338
• CWE-340

• https://metacpan.org/dist/Solstice/source/lib/Solstice/Session.pm#L481Product
• https://metacpan.org/dist/Solstice/source/lib/Solstice/Subsession.pm#L105Product
• https://security.metacpan.org/docs/guides/random-data-for-security.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2026/04/13/2Mailing List

Published

Apr 13, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-50811An out-of-bounds read vulnerability exists in FreeType 2.14.…6.5
• CVE-2026-50812A NULL pointer dereference in the SQLite Session Extension i…5.5
• CVE-2026-50813An issue in SQLite before Fossil check-in 869a51ae84df allow…6.1
• CVE-2026-5082Amon2::Plugin::Web::CSRFDefender versions from 7.00 through …5.3
• CVE-2026-5083Ado::Sessions versions through 0.935 for Perl generates inse…5.3
• CVE-2026-5084WebDyne::Session versions before 3.003_704 for Perl generate…6.5
• CVE-2026-5086Crypt::SecretBuffer versions before 0.019 for Perl is susece…7.5
• CVE-2026-50869An issue in the api/plugin.php component of Bludit v3.19.0 a…9.8
• CVE-2026-5087PAGI::Middleware::Session::Store::Cookie versions through 0.…7.5
• CVE-2026-50870An information disclosure vulnerability in the configuration…7.5
• CVE-2026-50871An OS command injection vulnerability in the media archiving…9.8
• CVE-2026-50872An issue in the loopback request handling component of fossa…9.8