CyberSecBulletin

SHLOMIF vulnerabilities

We track 2 vulnerabilities in SHLOMIF products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 14, 2026.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest SHLOMIF vulnerabilities

  • 8.6 High severity

    Config::IniFiles: External Control of File Name or Path

    CVE-2026-11527SHLOMIFEPSS 1.07%

    Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle. Config::IniFiles::_make_filehandle opens a filename argument with Perl's 2-arg open(), so a filename

  • 7.5 High severity

    XML::LibXML: Out-of-bounds Read

    CVE-2026-8177SHLOMIF

    XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the inp