CVE-2026-16235

Versions of Crypt::Password up to 0.28 for Perl are vulnerable due to the use of the insecure built-in rand function for generating salts, leading to predictable random values. This critical vulnerability can compromise the security of password hashing, making it easier for attackers to crack passwords. Organizations using these versions should prioritize immediate updates to mitigate the risk of credential exposure.