PT-2026-134514

CVE-2026-78192

·

Published

2026-10-31

·

Updated

2026-11-01

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions WebDyne versions 2.022 through 3.021
Description Unauthenticated clients can access application source code through the viewer on the default index page. Wrapper scripts, such as webdyne.psgi, enable this index page by default. The source viewer allows the retrieval of files under the document root, including .psp, .pm, and .pl files, when specified in the source parameter of an HTMX request. This allows a remote attacker to read Perl code and any credentials contained within the PERL blocks of .psp pages.
Recommendations Update WebDyne to version 3.022 or later. Restrict access to the source parameter in HTMX requests to prevent unauthorized file disclosure.
Vendors
Affected products
Weakness enumeration
CWE-540: Inclusion of Sensitive Information in Source Code
CWE-1188: Initialization of a Resource with an Insecure Default
Related identifiers
CVE-2026-78192
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com