CVE-2026-75031

Name of the Vulnerable Software and Affected Versions interchange (affected versions not specified)

Description A remote code execution issue exists in the “quick question” admin feature. Unauthenticated users can inject and execute arbitrary Perl code server-side. By default, this code runs within a Safe container, which is a restricted environment that limits the operations the code can perform. However, if the non-default AllowGlobal directive is configured for the accessed catalog, the restrictions are bypassed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.