SUSE-SU-2026:22926-1: perl-DBI&distro=SUSE Linux Micro 6.2 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 22-07-2026Last modified 29-07-2026
Open JSON

Vulnerability summary

SUSE-SU-2026:22926-1 is a vulnerability in perl-DBI&distro=SUSE Linux Micro 6.2 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 4 · Downstream 0 · Related 4
CVE-2026-15043CVE-2026-15392CVE-2026-60081CVE-2026-60082

Timeline

  1. 22-07-2026
    PublishedVulnerability first disclosed.
  2. 29-07-2026
    Last modifiedVulnerability information updated.

Description

Security update for perl-DBI This update for perl-DBI fixes the following issues: - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes outside the configured data director (bsc#1271629). - CVE-2026-15043: `DBI:SQL:Nano` has incorrect predicate evaluation, which allows for bypass of file-backed filters (bsc#1271399). - CVE-2026-60081: `DBI:ProfileData` does not limit the path index in profile parser, which enables small-file memory-amplification DoS (bsc#1271458). - CVE-2026-60082: out-of-bounds access in `_set_fbav` when a statement handle has zero fields but a non-empty row, which allows for a process crash (bsc#1271459).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse1 product
  • perl-DBI&distro=SUSE Linux Micro 6.2< 1.647.0-160000.5.1

1 vendor · 1 product

References

9 links