CVE-2026-111946

— UNSCOREDpublic exploit available

Published 2026-10-19 · Updated 2026-10-19

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When the response body is a filehandle and the file_etag option is not set, the ETag is built from the file's inode number, modification time and size. Clients receiving affected responses may use the disclosed inode numbers to aid backend fingerprinting and correlation of files served through different URLs.

Weaknesses

CWE-497

Public exploit & PoC references

https://github.com/robrwo/perl-Plack-Middleware-ETag/security/advisories/GHSA-943g-rgq5-6xc8

All references

https://github.com/robrwo/perl-Plack-Middleware-ETag/security/advisories/GHSA-943g-rgq5-6xc8
https://metacpan.org/release/RRWO/Plack-Middleware-ETag-0.06/changes
https://www.cve.org/CVERecord?id=CVE-2003-1418

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2025-33141
HIGHCVE-2026-102387
MEDIUMCVE-2026-104401
MEDIUMCVE-2026-105073
UNSCOREDCVE-2026-106106PoC
MEDIUMCVE-2026-108462
MEDIUMCVE-2026-110466
CRITICALCVE-2026-44945PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.