Concierge vulnerabilities

1 known vulnerability in Concierge from BVA. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Concierge::Sessions: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2026-2439Feb 16, 2026BVA

  Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids. The generate_session_id function in Concierge::Sessions::Base defaults to using the uuidgen command to generate a UUID, with a fallback to using Perl's built-in rand f