PT-2026-136744

CVE-2026-120637

·

Published

2026-11-03

·

Updated

2026-11-04

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

CGI versions before 5.00 for Perl take request parameters from the process command line arguments for an unrecognised REQUEST METHOD.
For a REQUEST METHOD such as OPTIONS, CGI falls through to its offline debugging mode, which is on by default, and builds the parameters and path info from the process's command line arguments.
Vendors
Affected products
Weakness enumeration
CWE-489: Active Debug Code
Related identifiers
CVE-2026-120637
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com