Web::Passwd vulnerabilities

1 known vulnerability in Web::Passwd from EVANK. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Web::Passwd: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-8500May 13, 2026EVANKEPSS 1.65%

  Web::Passwd versions through 0.03 for Perl is vulnerable to RCE. Web::Passwd is a small CGI application for managing htpasswd files using the htpasswd command. The user parameter is not validated or escaped, and is used as the last argument on the command line