ByteOS Network

NVD Vulnerability Details :

CVE-2026-9641

Deferred

Source-9b29abf9-4ab0-4765-b253-1875cd9b441e

Published At-12 Jun, 2026 | 16:16

Updated At-12 Jun, 2026 | 18:16

Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations. The default algorithm is HMAC-SHA1, which should only be used for legacy systems. These versions default to using 1000 iterations. Depending on the chosen algorithm, 220,000 to 1,400,000 iterations should be used.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE ID	Type	Source
CWE-916	Secondary	9b29abf9-4ab0-4765-b253-1875cd9b441e

CWE ID: CWE-916

Type: Secondary

Source: 9b29abf9-4ab0-4765-b253-1875cd9b441e

References

Hyperlink	Source	Resource
https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2	9b29abf9-4ab0-4765-b253-1875cd9b441e	N/A
https://metacpan.org/release/ARODLAND/Crypt-PBKDF2-0.261630/changes	9b29abf9-4ab0-4765-b253-1875cd9b441e	N/A
http://www.openwall.com/lists/oss-security/2026/06/12/5	af854a3a-2127-422b-91ae-364da2661108	N/A