CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-14380

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package name. Any caller-influenced value that reaches the Profile attribute is therefore arbitrary Perl code execution, including calls to run system commands. The Profile attribute can be set from three different sources that can carry untrusted data: the DBI_PROFILE environment variable, a direct attribute assignment, and a DSN driver-attribute clause dbi:Driver(Profile=>SPEC):db. An attacker controlling any of those inputs runs arbitrary Perl in the host process. The strongest remote position is a network-exposed DBI::Gofer / DBI::ProxyServer whose per-request DSN reaches the Profile attribute, letting a client execute code on the broker host.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 39.2%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2026-14380

Perl » Dbi » Version: N/A

cpe:2.3:a:perl:dbi:-
Perl » Dbi » Version: 0.58

cpe:2.3:a:perl:dbi:0.58
Perl » Dbi » Version: 0.59

cpe:2.3:a:perl:dbi:0.59
Perl » Dbi » Version: 0.60

cpe:2.3:a:perl:dbi:0.60
Perl » Dbi » Version: 0.61

cpe:2.3:a:perl:dbi:0.61
Perl » Dbi » Version: 0.62

cpe:2.3:a:perl:dbi:0.62
Perl » Dbi » Version: 0.63

cpe:2.3:a:perl:dbi:0.63
Perl » Dbi » Version: 0.64

cpe:2.3:a:perl:dbi:0.64
Perl » Dbi » Version: 0.65

cpe:2.3:a:perl:dbi:0.65
Perl » Dbi » Version: 0.66

cpe:2.3:a:perl:dbi:0.66
Perl » Dbi » Version: 0.67

cpe:2.3:a:perl:dbi:0.67
Perl » Dbi » Version: 0.68

cpe:2.3:a:perl:dbi:0.68
Perl » Dbi » Version: 0.69

cpe:2.3:a:perl:dbi:0.69
Perl » Dbi » Version: 0.70

cpe:2.3:a:perl:dbi:0.70
Perl » Dbi » Version: 0.71

cpe:2.3:a:perl:dbi:0.71
Perl » Dbi » Version: 0.72

cpe:2.3:a:perl:dbi:0.72
Perl » Dbi » Version: 0.73

cpe:2.3:a:perl:dbi:0.73
Perl » Dbi » Version: 0.74

cpe:2.3:a:perl:dbi:0.74
Perl » Dbi » Version: 0.75

cpe:2.3:a:perl:dbi:0.75
Perl » Dbi » Version: 0.76

cpe:2.3:a:perl:dbi:0.76
Perl » Dbi » Version: 0.77

cpe:2.3:a:perl:dbi:0.77
Perl » Dbi » Version: 0.78

cpe:2.3:a:perl:dbi:0.78
Perl » Dbi » Version: 0.79

cpe:2.3:a:perl:dbi:0.79
Perl » Dbi » Version: 0.80

cpe:2.3:a:perl:dbi:0.80
Perl » Dbi » Version: 0.81

cpe:2.3:a:perl:dbi:0.81
Perl » Dbi » Version: 0.82

cpe:2.3:a:perl:dbi:0.82
Perl » Dbi » Version: 0.83

cpe:2.3:a:perl:dbi:0.83
Perl » Dbi » Version: 0.84

cpe:2.3:a:perl:dbi:0.84
Perl » Dbi » Version: 0.85

cpe:2.3:a:perl:dbi:0.85
Perl » Dbi » Version: 0.86

cpe:2.3:a:perl:dbi:0.86
Perl » Dbi » Version: 0.87

cpe:2.3:a:perl:dbi:0.87
Perl » Dbi » Version: 0.88

cpe:2.3:a:perl:dbi:0.88
Perl » Dbi » Version: 0.89

cpe:2.3:a:perl:dbi:0.89
Perl » Dbi » Version: 0.90

cpe:2.3:a:perl:dbi:0.90
Perl » Dbi » Version: 0.91

cpe:2.3:a:perl:dbi:0.91
Perl » Dbi » Version: 0.92

cpe:2.3:a:perl:dbi:0.92
Perl » Dbi » Version: 0.93

cpe:2.3:a:perl:dbi:0.93
Perl » Dbi » Version: 0.94

cpe:2.3:a:perl:dbi:0.94
Perl » Dbi » Version: 0.95

cpe:2.3:a:perl:dbi:0.95
Perl » Dbi » Version: 1.00

cpe:2.3:a:perl:dbi:1.00
Perl » Dbi » Version: 1.01

cpe:2.3:a:perl:dbi:1.01
Perl » Dbi » Version: 1.02

cpe:2.3:a:perl:dbi:1.02
Perl » Dbi » Version: 1.03

cpe:2.3:a:perl:dbi:1.03
Perl » Dbi » Version: 1.04

cpe:2.3:a:perl:dbi:1.04
Perl » Dbi » Version: 1.05

cpe:2.3:a:perl:dbi:1.05
Perl » Dbi » Version: 1.06

cpe:2.3:a:perl:dbi:1.06
Perl » Dbi » Version: 1.07

cpe:2.3:a:perl:dbi:1.07
Perl » Dbi » Version: 1.08

cpe:2.3:a:perl:dbi:1.08
Perl » Dbi » Version: 1.09

cpe:2.3:a:perl:dbi:1.09
Perl » Dbi » Version: 1.10

cpe:2.3:a:perl:dbi:1.10
Perl » Dbi » Version: 1.11

cpe:2.3:a:perl:dbi:1.11
Perl » Dbi » Version: 1.12

cpe:2.3:a:perl:dbi:1.12
Perl » Dbi » Version: 1.13

cpe:2.3:a:perl:dbi:1.13
Perl » Dbi » Version: 1.14

cpe:2.3:a:perl:dbi:1.14
Perl » Dbi » Version: 1.15

cpe:2.3:a:perl:dbi:1.15
Perl » Dbi » Version: 1.16

cpe:2.3:a:perl:dbi:1.16
Perl » Dbi » Version: 1.17

cpe:2.3:a:perl:dbi:1.17
Perl » Dbi » Version: 1.18

cpe:2.3:a:perl:dbi:1.18
Perl » Dbi » Version: 1.19

cpe:2.3:a:perl:dbi:1.19
Perl » Dbi » Version: 1.20

cpe:2.3:a:perl:dbi:1.20
Perl » Dbi » Version: 1.21

cpe:2.3:a:perl:dbi:1.21
Perl » Dbi » Version: 1.22

cpe:2.3:a:perl:dbi:1.22
Perl » Dbi » Version: 1.23

cpe:2.3:a:perl:dbi:1.23
Perl » Dbi » Version: 1.24

cpe:2.3:a:perl:dbi:1.24
Perl » Dbi » Version: 1.25

cpe:2.3:a:perl:dbi:1.25
Perl » Dbi » Version: 1.26

cpe:2.3:a:perl:dbi:1.26
Perl » Dbi » Version: 1.27

cpe:2.3:a:perl:dbi:1.27
Perl » Dbi » Version: 1.28

cpe:2.3:a:perl:dbi:1.28
Perl » Dbi » Version: 1.29

cpe:2.3:a:perl:dbi:1.29
Perl » Dbi » Version: 1.30

cpe:2.3:a:perl:dbi:1.30
Perl » Dbi » Version: 1.31

cpe:2.3:a:perl:dbi:1.31
Perl » Dbi » Version: 1.32

cpe:2.3:a:perl:dbi:1.32
Perl » Dbi » Version: 1.33

cpe:2.3:a:perl:dbi:1.33
Perl » Dbi » Version: 1.34

cpe:2.3:a:perl:dbi:1.34
Perl » Dbi » Version: 1.35

cpe:2.3:a:perl:dbi:1.35
Perl » Dbi » Version: 1.36

cpe:2.3:a:perl:dbi:1.36
Perl » Dbi » Version: 1.37

cpe:2.3:a:perl:dbi:1.37
Perl » Dbi » Version: 1.38

cpe:2.3:a:perl:dbi:1.38
Perl » Dbi » Version: 1.39

cpe:2.3:a:perl:dbi:1.39
Perl » Dbi » Version: 1.40

cpe:2.3:a:perl:dbi:1.40
Perl » Dbi » Version: 1.41

cpe:2.3:a:perl:dbi:1.41
Perl » Dbi » Version: 1.42

cpe:2.3:a:perl:dbi:1.42
Perl » Dbi » Version: 1.43

cpe:2.3:a:perl:dbi:1.43
Perl » Dbi » Version: 1.44

cpe:2.3:a:perl:dbi:1.44
Perl » Dbi » Version: 1.45

cpe:2.3:a:perl:dbi:1.45
Perl » Dbi » Version: 1.46

cpe:2.3:a:perl:dbi:1.46
Perl » Dbi » Version: 1.47

cpe:2.3:a:perl:dbi:1.47
Perl » Dbi » Version: 1.48

cpe:2.3:a:perl:dbi:1.48
Perl » Dbi » Version: 1.48a

cpe:2.3:a:perl:dbi:1.48a
Perl » Dbi » Version: 1.49

cpe:2.3:a:perl:dbi:1.49
Perl » Dbi » Version: 1.50

cpe:2.3:a:perl:dbi:1.50
Perl » Dbi » Version: 1.51

cpe:2.3:a:perl:dbi:1.51
Perl » Dbi » Version: 1.52

cpe:2.3:a:perl:dbi:1.52
Perl » Dbi » Version: 1.53

cpe:2.3:a:perl:dbi:1.53
Perl » Dbi » Version: 1.54

cpe:2.3:a:perl:dbi:1.54
Perl » Dbi » Version: 1.55

cpe:2.3:a:perl:dbi:1.55
Perl » Dbi » Version: 1.56

cpe:2.3:a:perl:dbi:1.56
Perl » Dbi » Version: 1.57

cpe:2.3:a:perl:dbi:1.57
Perl » Dbi » Version: 1.58

cpe:2.3:a:perl:dbi:1.58
Perl » Dbi » Version: 1.59

cpe:2.3:a:perl:dbi:1.59
Perl » Dbi » Version: 1.601

cpe:2.3:a:perl:dbi:1.601
Perl » Dbi » Version: 1.602

cpe:2.3:a:perl:dbi:1.602
Perl » Dbi » Version: 1.603

cpe:2.3:a:perl:dbi:1.603
Perl » Dbi » Version: 1.604

cpe:2.3:a:perl:dbi:1.604
Perl » Dbi » Version: 1.605

cpe:2.3:a:perl:dbi:1.605
Perl » Dbi » Version: 1.606

cpe:2.3:a:perl:dbi:1.606
Perl » Dbi » Version: 1.607

cpe:2.3:a:perl:dbi:1.607
Perl » Dbi » Version: 1.608

cpe:2.3:a:perl:dbi:1.608
Perl » Dbi » Version: 1.609

cpe:2.3:a:perl:dbi:1.609
Perl » Dbi » Version: 1.611

cpe:2.3:a:perl:dbi:1.611
Perl » Dbi » Version: 1.611_90

cpe:2.3:a:perl:dbi:1.611_90
Perl » Dbi » Version: 1.611_91

cpe:2.3:a:perl:dbi:1.611_91
Perl » Dbi » Version: 1.611_92

cpe:2.3:a:perl:dbi:1.611_92
Perl » Dbi » Version: 1.611_93

cpe:2.3:a:perl:dbi:1.611_93
Perl » Dbi » Version: 1.611_94

cpe:2.3:a:perl:dbi:1.611_94
Perl » Dbi » Version: 1.612

cpe:2.3:a:perl:dbi:1.612
Perl » Dbi » Version: 1.613

cpe:2.3:a:perl:dbi:1.613
Perl » Dbi » Version: 1.613_70

cpe:2.3:a:perl:dbi:1.613_70
Perl » Dbi » Version: 1.613_71

cpe:2.3:a:perl:dbi:1.613_71
Perl » Dbi » Version: 1.613_90

cpe:2.3:a:perl:dbi:1.613_90
Perl » Dbi » Version: 1.613_91

cpe:2.3:a:perl:dbi:1.613_91
Perl » Dbi » Version: 1.613_92

cpe:2.3:a:perl:dbi:1.613_92
Perl » Dbi » Version: 1.613_93

cpe:2.3:a:perl:dbi:1.613_93
Perl » Dbi » Version: 1.614

cpe:2.3:a:perl:dbi:1.614
Perl » Dbi » Version: 1.614_90

cpe:2.3:a:perl:dbi:1.614_90
Perl » Dbi » Version: 1.615

cpe:2.3:a:perl:dbi:1.615
Perl » Dbi » Version: 1.616

cpe:2.3:a:perl:dbi:1.616
Perl » Dbi » Version: 1.617

cpe:2.3:a:perl:dbi:1.617
Perl » Dbi » Version: 1.618

cpe:2.3:a:perl:dbi:1.618
Perl » Dbi » Version: 1.619

cpe:2.3:a:perl:dbi:1.619
Perl » Dbi » Version: 1.620

cpe:2.3:a:perl:dbi:1.620
Perl » Dbi » Version: 1.621

cpe:2.3:a:perl:dbi:1.621
Perl » Dbi » Version: 1.622

cpe:2.3:a:perl:dbi:1.622
Perl » Dbi » Version: 1.623

cpe:2.3:a:perl:dbi:1.623
Perl » Dbi » Version: 1.624

cpe:2.3:a:perl:dbi:1.624
Perl » Dbi » Version: 1.625

cpe:2.3:a:perl:dbi:1.625
Perl » Dbi » Version: 1.626

cpe:2.3:a:perl:dbi:1.626
Perl » Dbi » Version: 1.627

cpe:2.3:a:perl:dbi:1.627
Perl » Dbi » Version: 1.628

cpe:2.3:a:perl:dbi:1.628
Perl » Dbi » Version: 1.630

cpe:2.3:a:perl:dbi:1.630
Perl » Dbi » Version: 1.631

cpe:2.3:a:perl:dbi:1.631
Perl » Dbi » Version: 1.632

cpe:2.3:a:perl:dbi:1.632
Perl » Dbi » Version: 1.632_90

cpe:2.3:a:perl:dbi:1.632_90
Perl » Dbi » Version: 1.633

cpe:2.3:a:perl:dbi:1.633
Perl » Dbi » Version: 1.633_90

cpe:2.3:a:perl:dbi:1.633_90
Perl » Dbi » Version: 1.633_91

cpe:2.3:a:perl:dbi:1.633_91
Perl » Dbi » Version: 1.633_92

cpe:2.3:a:perl:dbi:1.633_92
Perl » Dbi » Version: 1.634

cpe:2.3:a:perl:dbi:1.634
Perl » Dbi » Version: 1.635

cpe:2.3:a:perl:dbi:1.635
Perl » Dbi » Version: 1.636

cpe:2.3:a:perl:dbi:1.636
Perl » Dbi » Version: 1.637

cpe:2.3:a:perl:dbi:1.637
Perl » Dbi » Version: 1.638

cpe:2.3:a:perl:dbi:1.638
Perl » Dbi » Version: 1.639

cpe:2.3:a:perl:dbi:1.639
Perl » Dbi » Version: 1.640

cpe:2.3:a:perl:dbi:1.640
Perl » Dbi » Version: 1.641

cpe:2.3:a:perl:dbi:1.641
Perl » Dbi » Version: 1.642

cpe:2.3:a:perl:dbi:1.642
Perl » Dbi » Version: 1.643

cpe:2.3:a:perl:dbi:1.643
Perl » Dbi » Version: 1.644

cpe:2.3:a:perl:dbi:1.644
Perl » Dbi » Version: 1.645

cpe:2.3:a:perl:dbi:1.645
Perl » Dbi » Version: 1.646

cpe:2.3:a:perl:dbi:1.646
Perl » Dbi » Version: 1.647

cpe:2.3:a:perl:dbi:1.647
Perl » Dbi » Version: 1.648

cpe:2.3:a:perl:dbi:1.648

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-14380

Products

Pricing

Contact Us