CVE-2026-19546
Received Received - Intake

DBI library privilege escalation vulnerability

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: Red Hat, Inc.

Description
A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-19546
EUVD
EUVD-2026-56197

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
red_hat perl_dbi From 1.650 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-19546 is a security flaw in the Perl DBI module affecting Red Hat Enterprise Linux versions 9.8.z and 10.2.z. It is an incomplete fix for CVE-2026-14380, which allowed arbitrary code execution via the Profile attribute. Attackers could manipulate this attribute through untrusted sources like environment variables or DSN clauses to inject and execute Perl code, including system commands.

Impact Analysis

This vulnerability allows attackers to execute arbitrary code on affected systems. If you use Perl DBI in RHEL 9.8.z or 10.2.z, especially in network-exposed environments like DBI::Gofer or DBI::ProxyServer, an attacker could gain control of your system, steal data, or disrupt services.

Compliance Impact

This vulnerability could lead to unauthorized access, data breaches, or data integrity issues, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations must address this flaw to maintain data protection and security standards.

Mitigation Strategies

Upgrade to a patched version of the Perl DBI module or apply Red Hat's official mitigation for RHEL 9.8.z and 10.2.z systems. Avoid exposing DBI::Gofer or DBI::ProxyServer instances to untrusted networks. Remove or restrict access to the DBI_PROFILE environment variable in affected configurations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19546. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart