CVE-2026-120632

A flaw was found in the Perl CGI module. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted HTTP request. Due to an inefficient regular expression used when parsing multipart/related Content-Type headers, processing non-matching headers triggers catastrophic backtracking. This results in excessive CPU resource exhaustion and renders the application unresponsive, even without a request body.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.