CVE-2026-15392

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-15392", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "state": "PUBLISHED", "assignerShortName": "CPANSec", "dateReserved": "2026-07-10T12:52:40.335Z", "datePublished": "2026-07-14T15:34:01.547Z", "dateUpdated": "2026-07-15T14:01:34.760Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "DBI", "product": "DBD::File", "programFiles": ["lib/DBD/File.pm"], "programRoutines": [{"name": "DBD::File::complete_table_name"}], "repo": "https://github.com/perl5-dbi/dbi", "vendor": "HMBRAND", "versions": [{"lessThan": "1.651", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location.\n\nThe complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories.\n\nCallers of file-based drivers can read or write files outside of the data directory."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-59", "description": "CWE-59 Improper Link Resolution Before File Access ('Link Following')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-07-14T15:34:01.547Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://github.com/perl5-dbi/dbi/security/advisories/GHSA-mh3j-xwf4-jrqw"}, {"tags": ["release-notes"], "url": "https://metacpan.org/release/HMBRAND/DBI-1.651/changes"}, {"tags": ["patch"], "url": "https://github.com/perl5-dbi/dbi/commit/96d62dfe4528bf56fe13f413ed323d4252531728.patch"}], "solutions": [{"lang": "en", "value": "Upgrade to version 1.651 or later."}], "source": {"discovery": "UNKNOWN"}, "title": "DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location", "x_generator": {"engine": "cpansec-cna-tool 0.1"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/07/14/15"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-07-14T18:23:06.476Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-07-15T14:01:32.521268Z", "id": "CVE-2026-15392", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-15T14:01:34.760Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-15392", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "state": "PUBLISHED", "assignerShortName": "CPANSec", "dateReserved": "2026-07-10T12:52:40.335Z", "datePublished": "2026-07-14T15:34:01.547Z", "dateUpdated": "2026-07-15T14:01:34.760Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "DBI", "product": "DBD::File", "programFiles": ["lib/DBD/File.pm"], "programRoutines": [{"name": "DBD::File::complete_table_name"}], "repo": "https://github.com/perl5-dbi/dbi", "vendor": "HMBRAND", "versions": [{"lessThan": "1.651", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location.\n\nThe complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories.\n\nCallers of file-based drivers can read or write files outside of the data directory."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-59", "description": "CWE-59 Improper Link Resolution Before File Access ('Link Following')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-07-14T15:34:01.547Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://github.com/perl5-dbi/dbi/security/advisories/GHSA-mh3j-xwf4-jrqw"}, {"tags": ["release-notes"], "url": "https://metacpan.org/release/HMBRAND/DBI-1.651/changes"}, {"tags": ["patch"], "url": "https://github.com/perl5-dbi/dbi/commit/96d62dfe4528bf56fe13f413ed323d4252531728.patch"}], "solutions": [{"lang": "en", "value": "Upgrade to version 1.651 or later."}], "source": {"discovery": "UNKNOWN"}, "title": "DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location", "x_generator": {"engine": "cpansec-cna-tool 0.1"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/07/14/15"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-07-14T18:23:06.476Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-15392", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-15T14:01:32.521268Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-15T14:01:01.246Z"}}]}}

{"affected": [{"affectedData": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "DBI", "product": "DBD::File", "programFiles": ["lib/DBD/File.pm"], "programRoutines": [{"name": "DBD::File::complete_table_name"}], "repo": "https://github.com/perl5-dbi/dbi", "vendor": "HMBRAND", "versions": [{"lessThan": "1.651", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location.\n\nThe complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories.\n\nCallers of file-based drivers can read or write files outside of the data directory."}, {"lang": "es", "value": "Las versiones de DBD::File anteriores a la 1.651 para Perl no garantizan que el archivo de tabla no sea un enlace simb\u00f3lico a una ubicaci\u00f3n no confiable.\n\nEl m\u00e9todo complete_table_name construye la ruta absoluta del archivo de tabla sin verificar si el archivo es un enlace simb\u00f3lico. Un enlace dentro del directorio de datos puede apuntar a un archivo de tabla en cualquier ruta fuera de los directorios configurados f_dir y f_dir_search.\n\nLos llamadores de controladores basados en archivos pueden leer o escribir archivos fuera del directorio de datos."}], "id": "CVE-2026-15392", "lastModified": "2026-10-24T21:10:00.130", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 7.7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 5.2, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-15392", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-07-15T14:01:32.521268Z", "version": "2.0.3"}}]}, "published": "2026-07-14T16:16:45.827", "references": [{"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "url": "https://github.com/perl5-dbi/dbi/commit/96d62dfe4528bf56fe13f413ed323d4252531728.patch"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "url": "https://github.com/perl5-dbi/dbi/security/advisories/GHSA-mh3j-xwf4-jrqw"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "url": "https://metacpan.org/release/HMBRAND/DBI-1.651/changes"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2026/07/14/15"}], "sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-59"}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "type": "Secondary"}]}

{"bugzilla": {"description": "perl-DBI: DBD::File: Arbitrary file read/write via symlink vulnerability", "id": "2500029", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500029"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", "status": "draft"}, "cwe": "CWE-59", "details": ["A flaw was found in DBD::File. The `complete_table_name` method, responsible for building absolute table file paths, does not verify if the file is a symbolic link. This oversight allows a local attacker to create a symbolic link within the data directory that points to an arbitrary file outside of the intended data storage. Consequently, file-based drivers can be tricked into reading from or writing to unauthorized files, potentially leading to information disclosure or data corruption."], "mitigation": {"lang": "en:us", "value": "To mitigate this issue, ensure that directories used by applications using `DBD::File` for data storage have restricted write permissions, preventing untrusted local users from creating symbolic links. This operational control limits an attacker's ability to exploit the vulnerability by preventing the creation of malicious symlinks."}, "name": "CVE-2026-15392", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "perl-DBI", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "perl-DBI", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "perl-DBI", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "perl-DBI", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "perl-DBI:1.641/perl-DBI", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "perl-DBI", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-14T15:34:01Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-15392\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-15392\nhttps://github.com/perl5-dbi/dbi/commit/96d62dfe4528bf56fe13f413ed323d4252531728.patch\nhttps://github.com/perl5-dbi/dbi/security/advisories/GHSA-mh3j-xwf4-jrqw\nhttps://metacpan.org/release/HMBRAND/DBI-1.651/changes"], "statement": "This Moderate flaw in DBD::File allows a local attacker to achieve arbitrary file read and write access. By creating a symbolic link within the data directory, an attacker can trick file-based drivers into accessing files outside of the intended directories, leading to potential information disclosure or data corruption. This issue is only exploitable by local attackers with write access to the directory used by an application using DBD::File perl module to write or read database data files.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.651)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "DBD::File", "source": "cna", "vendor": "HMBRAND"}, "product": "dbd::file", "vendor": "hmbrand"}], "created": "2026-07-16T15:15:04.825425+00:00", "updated": "2026-07-31T10:15:06.116335+00:00", "vendors": ["hmbrand", "hmbrand$PRODUCT$dbd::file"]}