Replay Vulnerability in Authen::SASL::Perl::DIGEST_MD5 for Perl
CVE-2026-86219
Currently unrated
What is CVE-2026-86219?
Authen::SASL::Perl::DIGEST_MD5 versions prior to 2.2100 are susceptible to a replay attack due to insufficient nonce verification during the authentication process. The vulnerability arises when a server generates a nonce and sends it to the client in a challenge, but fails to compare the nonce with subsequent responses from the client. As a result, attackers can capture a valid authentication response and replay it during future sessions, allowing them to authenticate as legitimate users without knowing their passwords. This issue emphasizes the need for proper nonce validation to prevent unauthorized access in Perl applications.