Vulnerability Details CVE-2026-4176
Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib.
Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-2026-3381 due to a vendored version of zlib which has several vulnerabilities, including CVE-2026-27171. The bundled Compress::Raw::Zlib was updated to version 2.221 in Perl blead commit c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.1%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-4176
-
-
-
cpe:2.3:a:perl:perl:5.10.0
-
cpe:2.3:a:perl:perl:5.10.1
-
cpe:2.3:a:perl:perl:5.11.0
-
cpe:2.3:a:perl:perl:5.11.1
-
cpe:2.3:a:perl:perl:5.11.2
-
cpe:2.3:a:perl:perl:5.11.3
-
cpe:2.3:a:perl:perl:5.11.4
-
cpe:2.3:a:perl:perl:5.11.5
-
cpe:2.3:a:perl:perl:5.12.0
-
cpe:2.3:a:perl:perl:5.12.1
-
cpe:2.3:a:perl:perl:5.12.2
-
cpe:2.3:a:perl:perl:5.12.3
-
cpe:2.3:a:perl:perl:5.12.4
-
cpe:2.3:a:perl:perl:5.12.5
-
cpe:2.3:a:perl:perl:5.13.0
-
cpe:2.3:a:perl:perl:5.13.1
-
cpe:2.3:a:perl:perl:5.13.10
-
cpe:2.3:a:perl:perl:5.13.11
-
cpe:2.3:a:perl:perl:5.13.2
-
cpe:2.3:a:perl:perl:5.13.3
-
cpe:2.3:a:perl:perl:5.13.4
-
cpe:2.3:a:perl:perl:5.13.5
-
cpe:2.3:a:perl:perl:5.13.6
-
cpe:2.3:a:perl:perl:5.13.7
-
cpe:2.3:a:perl:perl:5.13.8
-
cpe:2.3:a:perl:perl:5.13.9
-
cpe:2.3:a:perl:perl:5.14.0
-
cpe:2.3:a:perl:perl:5.14.1
-
cpe:2.3:a:perl:perl:5.14.2
-
cpe:2.3:a:perl:perl:5.14.3
-
cpe:2.3:a:perl:perl:5.14.4
-
cpe:2.3:a:perl:perl:5.15.0
-
cpe:2.3:a:perl:perl:5.15.1
-
cpe:2.3:a:perl:perl:5.15.2
-
cpe:2.3:a:perl:perl:5.15.3
-
cpe:2.3:a:perl:perl:5.15.4
-
cpe:2.3:a:perl:perl:5.15.5
-
cpe:2.3:a:perl:perl:5.15.6
-
cpe:2.3:a:perl:perl:5.15.7
-
cpe:2.3:a:perl:perl:5.15.8
-
cpe:2.3:a:perl:perl:5.15.9
-
cpe:2.3:a:perl:perl:5.16.0
-
cpe:2.3:a:perl:perl:5.16.1
-
cpe:2.3:a:perl:perl:5.16.2
-
cpe:2.3:a:perl:perl:5.16.3
-
cpe:2.3:a:perl:perl:5.17.0
-
cpe:2.3:a:perl:perl:5.17.1
-
cpe:2.3:a:perl:perl:5.17.10
-
cpe:2.3:a:perl:perl:5.17.11
-
cpe:2.3:a:perl:perl:5.17.2
-
cpe:2.3:a:perl:perl:5.17.3
-
cpe:2.3:a:perl:perl:5.17.4
-
cpe:2.3:a:perl:perl:5.17.5
-
cpe:2.3:a:perl:perl:5.17.6
-
cpe:2.3:a:perl:perl:5.17.7
-
cpe:2.3:a:perl:perl:5.17.7.0
-
cpe:2.3:a:perl:perl:5.17.8
-
cpe:2.3:a:perl:perl:5.17.9
-
cpe:2.3:a:perl:perl:5.18.0
-
cpe:2.3:a:perl:perl:5.18.1
-
cpe:2.3:a:perl:perl:5.18.2
-
cpe:2.3:a:perl:perl:5.18.3
-
cpe:2.3:a:perl:perl:5.18.4
-
cpe:2.3:a:perl:perl:5.19.0
-
cpe:2.3:a:perl:perl:5.19.1
-
cpe:2.3:a:perl:perl:5.19.10
-
cpe:2.3:a:perl:perl:5.19.11
-
cpe:2.3:a:perl:perl:5.19.2
-
cpe:2.3:a:perl:perl:5.19.3
-
cpe:2.3:a:perl:perl:5.19.4
-
cpe:2.3:a:perl:perl:5.19.5
-
cpe:2.3:a:perl:perl:5.19.6
-
cpe:2.3:a:perl:perl:5.19.7
-
cpe:2.3:a:perl:perl:5.19.8
-
cpe:2.3:a:perl:perl:5.19.9
-
cpe:2.3:a:perl:perl:5.20.0
-
cpe:2.3:a:perl:perl:5.20.1
-
cpe:2.3:a:perl:perl:5.20.2
-
cpe:2.3:a:perl:perl:5.20.3
-
cpe:2.3:a:perl:perl:5.21.0
-
cpe:2.3:a:perl:perl:5.21.1
-
cpe:2.3:a:perl:perl:5.21.10
-
cpe:2.3:a:perl:perl:5.21.11
-
cpe:2.3:a:perl:perl:5.21.2
-
cpe:2.3:a:perl:perl:5.21.3
-
cpe:2.3:a:perl:perl:5.21.4
-
cpe:2.3:a:perl:perl:5.21.5
-
cpe:2.3:a:perl:perl:5.21.6
-
cpe:2.3:a:perl:perl:5.21.7
-
cpe:2.3:a:perl:perl:5.21.8
-
cpe:2.3:a:perl:perl:5.21.9
-
-
cpe:2.3:a:perl:perl:5.22.0
-
cpe:2.3:a:perl:perl:5.22.1
-
cpe:2.3:a:perl:perl:5.22.2
-
cpe:2.3:a:perl:perl:5.22.3
-
cpe:2.3:a:perl:perl:5.22.4
-
cpe:2.3:a:perl:perl:5.23.0
-
cpe:2.3:a:perl:perl:5.23.1
-
cpe:2.3:a:perl:perl:5.23.2
-
cpe:2.3:a:perl:perl:5.23.3
-
cpe:2.3:a:perl:perl:5.23.4
-
cpe:2.3:a:perl:perl:5.23.5
-
cpe:2.3:a:perl:perl:5.23.6
-
cpe:2.3:a:perl:perl:5.23.7
-
cpe:2.3:a:perl:perl:5.23.8
-
cpe:2.3:a:perl:perl:5.23.9
-
cpe:2.3:a:perl:perl:5.24.0
-
cpe:2.3:a:perl:perl:5.24.1
-
cpe:2.3:a:perl:perl:5.24.2
-
cpe:2.3:a:perl:perl:5.24.3
-
cpe:2.3:a:perl:perl:5.24.4
-
cpe:2.3:a:perl:perl:5.25.0
-
cpe:2.3:a:perl:perl:5.25.1
-
cpe:2.3:a:perl:perl:5.25.10
-
cpe:2.3:a:perl:perl:5.25.11
-
cpe:2.3:a:perl:perl:5.25.12
-
cpe:2.3:a:perl:perl:5.25.2
-
cpe:2.3:a:perl:perl:5.25.3
-
cpe:2.3:a:perl:perl:5.25.4
-
cpe:2.3:a:perl:perl:5.25.5
-
cpe:2.3:a:perl:perl:5.25.6
-
cpe:2.3:a:perl:perl:5.25.7
-
cpe:2.3:a:perl:perl:5.25.8
-
cpe:2.3:a:perl:perl:5.25.9
-
cpe:2.3:a:perl:perl:5.26.0
-
cpe:2.3:a:perl:perl:5.26.1
-
cpe:2.3:a:perl:perl:5.26.2
-
cpe:2.3:a:perl:perl:5.26.3
-
cpe:2.3:a:perl:perl:5.27.0
-
cpe:2.3:a:perl:perl:5.27.1
-
cpe:2.3:a:perl:perl:5.27.10
-
cpe:2.3:a:perl:perl:5.27.11
-
cpe:2.3:a:perl:perl:5.27.2
-
cpe:2.3:a:perl:perl:5.27.3
-
cpe:2.3:a:perl:perl:5.27.4
-
cpe:2.3:a:perl:perl:5.27.5
-
cpe:2.3:a:perl:perl:5.27.6
-
cpe:2.3:a:perl:perl:5.27.7
-
cpe:2.3:a:perl:perl:5.27.8
-
cpe:2.3:a:perl:perl:5.27.9
-
cpe:2.3:a:perl:perl:5.28.0
-
cpe:2.3:a:perl:perl:5.28.1
-
cpe:2.3:a:perl:perl:5.28.2
-
cpe:2.3:a:perl:perl:5.28.3
-
cpe:2.3:a:perl:perl:5.29.0
-
cpe:2.3:a:perl:perl:5.29.1
-
cpe:2.3:a:perl:perl:5.29.10
-
cpe:2.3:a:perl:perl:5.29.2
-
cpe:2.3:a:perl:perl:5.29.3
-
cpe:2.3:a:perl:perl:5.29.4
-
cpe:2.3:a:perl:perl:5.29.5
-
cpe:2.3:a:perl:perl:5.29.6
-
cpe:2.3:a:perl:perl:5.29.7
-
cpe:2.3:a:perl:perl:5.29.8
-
cpe:2.3:a:perl:perl:5.29.9
-
cpe:2.3:a:perl:perl:5.30.0
-
cpe:2.3:a:perl:perl:5.30.1
-
cpe:2.3:a:perl:perl:5.30.2
-
cpe:2.3:a:perl:perl:5.30.3
-
cpe:2.3:a:perl:perl:5.31.0
-
cpe:2.3:a:perl:perl:5.31.1
-
cpe:2.3:a:perl:perl:5.31.10
-
cpe:2.3:a:perl:perl:5.31.11
-
cpe:2.3:a:perl:perl:5.31.2
-
cpe:2.3:a:perl:perl:5.31.3
-
cpe:2.3:a:perl:perl:5.31.4
-
cpe:2.3:a:perl:perl:5.31.5
-
cpe:2.3:a:perl:perl:5.31.6
-
cpe:2.3:a:perl:perl:5.31.7
-
cpe:2.3:a:perl:perl:5.31.8
-
cpe:2.3:a:perl:perl:5.31.9
-
cpe:2.3:a:perl:perl:5.32.0
-
cpe:2.3:a:perl:perl:5.32.1
-
cpe:2.3:a:perl:perl:5.33.0
-
cpe:2.3:a:perl:perl:5.33.1
-
cpe:2.3:a:perl:perl:5.33.2
-
cpe:2.3:a:perl:perl:5.33.3
-
cpe:2.3:a:perl:perl:5.33.4
-
cpe:2.3:a:perl:perl:5.33.5
-
cpe:2.3:a:perl:perl:5.33.6
-
cpe:2.3:a:perl:perl:5.33.7
-
cpe:2.3:a:perl:perl:5.33.8
-
cpe:2.3:a:perl:perl:5.33.9
-
cpe:2.3:a:perl:perl:5.34.0
-
cpe:2.3:a:perl:perl:5.34.1
-
cpe:2.3:a:perl:perl:5.34.2
-
cpe:2.3:a:perl:perl:5.34.3
-
cpe:2.3:a:perl:perl:5.35.0
-
cpe:2.3:a:perl:perl:5.35.1
-
cpe:2.3:a:perl:perl:5.35.10
-
cpe:2.3:a:perl:perl:5.35.11
-
cpe:2.3:a:perl:perl:5.35.2
-
cpe:2.3:a:perl:perl:5.35.3
-
cpe:2.3:a:perl:perl:5.35.4
-
cpe:2.3:a:perl:perl:5.35.5
-
cpe:2.3:a:perl:perl:5.35.6
-
cpe:2.3:a:perl:perl:5.35.7
-
cpe:2.3:a:perl:perl:5.35.8
-
cpe:2.3:a:perl:perl:5.35.9
-
cpe:2.3:a:perl:perl:5.36.0
-
cpe:2.3:a:perl:perl:5.36.1
-
cpe:2.3:a:perl:perl:5.36.2
-
cpe:2.3:a:perl:perl:5.36.3
-
cpe:2.3:a:perl:perl:5.37.0
-
cpe:2.3:a:perl:perl:5.37.1
-
cpe:2.3:a:perl:perl:5.37.10
-
cpe:2.3:a:perl:perl:5.37.11
-
cpe:2.3:a:perl:perl:5.37.2
-
cpe:2.3:a:perl:perl:5.37.3
-
cpe:2.3:a:perl:perl:5.37.4
-
cpe:2.3:a:perl:perl:5.37.5
-
cpe:2.3:a:perl:perl:5.37.6
-
cpe:2.3:a:perl:perl:5.37.7
-
cpe:2.3:a:perl:perl:5.37.8
-
cpe:2.3:a:perl:perl:5.37.9
-
cpe:2.3:a:perl:perl:5.38.0
-
cpe:2.3:a:perl:perl:5.38.1
-
cpe:2.3:a:perl:perl:5.38.2
-
cpe:2.3:a:perl:perl:5.38.3
-
cpe:2.3:a:perl:perl:5.38.4
-
cpe:2.3:a:perl:perl:5.39.0
-
cpe:2.3:a:perl:perl:5.39.1
-
cpe:2.3:a:perl:perl:5.39.10
-
cpe:2.3:a:perl:perl:5.39.2
-
cpe:2.3:a:perl:perl:5.39.3
-
cpe:2.3:a:perl:perl:5.39.4
-
cpe:2.3:a:perl:perl:5.39.5
-
cpe:2.3:a:perl:perl:5.39.6
-
cpe:2.3:a:perl:perl:5.39.7
-
cpe:2.3:a:perl:perl:5.39.8
-
cpe:2.3:a:perl:perl:5.39.9
-
cpe:2.3:a:perl:perl:5.40.0
-
cpe:2.3:a:perl:perl:5.40.1
-
cpe:2.3:a:perl:perl:5.40.2
-
cpe:2.3:a:perl:perl:5.41.0
-
cpe:2.3:a:perl:perl:5.41.1
-
cpe:2.3:a:perl:perl:5.41.10
-
cpe:2.3:a:perl:perl:5.41.11
-
cpe:2.3:a:perl:perl:5.41.12
-
cpe:2.3:a:perl:perl:5.41.2
-
cpe:2.3:a:perl:perl:5.41.3
-
cpe:2.3:a:perl:perl:5.41.4
-
cpe:2.3:a:perl:perl:5.41.5
-
cpe:2.3:a:perl:perl:5.41.6
-
cpe:2.3:a:perl:perl:5.41.7
-
cpe:2.3:a:perl:perl:5.41.8
-
cpe:2.3:a:perl:perl:5.41.9
-
cpe:2.3:a:perl:perl:5.9.4
-
cpe:2.3:a:perl:perl:5.9.5