CVE-2026-9698highCWE-120CWE-787

CVE-2026-9698: high-severity vulnerability in HMBRAND DBI

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer

Published · Updated

Follow this CVE+ Monitor DBI+ Monitor libdbi-perl

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.5%
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
HMBRAND · DBI
Related CVEs — HMBRAND DBI

In the same product, most dangerous first.

CVE-2026-60082CRITICALDBI versions before 1.651 for Perl do not enforce statement handle consistency with the rowEPSS 0.7%CVE-2026-10879CRITICALDBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 bindersEPSS 0.5%CVE-2026-14739CRITICALDBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholdersEPSS 0.4%CVE-2026-14740CRITICALDBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL commentEPSS 0.4%