Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CVE-2026-115936: libio-compress-brotli-perl package may allow malicious code execution
CVE-2026-115936 · published 8 days ago
Summary
The Perl library that handles Brotli compression in Debian and Ubuntu systems can be tricked into running unwanted code. This could let an attacker take control of affected applications or cause them to stop working. Install the latest security update for the libio-compress-brotli-perl package as soon as it is available.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:13 | debian | libio-compress-brotli-perl | All versions |
| Debian:14 | debian | libio-compress-brotli-perl | All versions |
| Ubuntu:24.04:LTS | canonical | libio-compress-brotli-perl | All versions |
Original advisory text
DEBIAN-CVE-2026-115936
[Unknown description]
References
- https://security-tracker.debian.org/tracker/CVE-2026-115936 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-115936 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-115936 Third Party Advisory
- https://lists.security.metacpan.org/cve-announce/msg/44587953/ Third Party Advisory
Timeline
Published28 Oct 2026
Updated28 Oct 2026
First seen24 Oct 2026
Track software like this
Free during beta