{"schemaVersion":3,"id":"USN-8736-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"perl vulnerabilities\n\nIt was discovered that Perl incorrectly handled certain large inputs during\nregular expression matching. An attacker could possibly use this issue to\ntrigger out-of-bounds heap reads or writes, resulting in a denial of\nservice or arbitrary code execution. (CVE-2026-15534)\n\nIt was discovered that Perl incorrectly handled certain regular expression\ncontaining alternative matching branches. An attacker could  possibly use\nthis issue to cause incorrect regular expression matches, resulting in\nsecurity restrictions being bypassed. (CVE-2026-19487)","dates":{"published":"2026-09-08T14:25:07.000Z","modified":"2026-09-09T00:42:26.220Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"perl","name":"perl","label":"perl","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/perl","purlType":"deb","versions":[{"text":"< 5.18.2-2ubuntu1.7+esm9","noFixRecorded":false,"fixedIn":null},{"text":"< 5.22.1-9ubuntu0.9+esm4","noFixRecorded":false,"fixedIn":null},{"text":"< 5.26.1-6ubuntu0.7+esm4","noFixRecorded":false,"fixedIn":null},{"text":"< 5.30.0-9ubuntu0.5+esm4","noFixRecorded":false,"fixedIn":null},{"text":"< 5.34.0-3ubuntu1.9","noFixRecorded":false,"fixedIn":null},{"text":"< 5.40.1-7ubuntu0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.18.2-2ubuntu1.7+esm9 | < 5.22.1-9ubuntu0.9+esm4 | < 5.26.1-6ubuntu0.7+esm4 | < 5.30.0-9ubuntu0.5+esm4 | < 5.34.0-3ubuntu1.9 | < 5.40.1-7ubuntu0.2","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8736-1","label":"ubuntu.com/security/notices/USN-8736-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-15534","label":"ubuntu.com/security/CVE-2026-15534","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-19487","label":"ubuntu.com/security/CVE-2026-19487","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2026-15534","CVE-2026-19487"],"downstream":[],"duplicates":[],"related":["CVE-2026-15534","CVE-2026-19487"]},"timeline":[{"kind":"published","date":"2026-09-08T14:25:07.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-09T00:42:26.220Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T12:30:20.777Z","stale":false,"partial":false}}