CVE-2026-97230

Name of the Vulnerable Software and Affected Versions IO::Socket::SSL::SelfCertificate version 1.00

Description This software contains malware that executes Python code retrieved from an obfuscated URL. The generate certificate() function runs a Python script stored as a certificate file located in lib/Crypt/SelfCertificate/sample/cert.pem. This script uses base64 encoding to hide a hardcoded HTTP URL, retrieves the response body from that URL, and executes it directly. This allows arbitrary code to be invoked with the privileges of the user without saving a script to the host system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.