SZB-9a4c95f581
EUVD-2026-105771: Mozilla::CA Perl bundle trusts root linked to compromised intermediates
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Mozilla::CA
- Product
- Mozilla::CA for Perl
- First seen
Summary
The EU vulnerability database (EUVD) lists EUVD-2026-105771 with a CVSS v3.1 score of 9.1. The entry says Mozilla::CA versions before 20261020 include a CA bundle with a root tied to compromised intermediates.
If you use Mozilla::CA
Upgrade Mozilla::CA to version 20261020 or later
Review certificate trust bundles in Perl applications for the affected root
Verify TLS connections that relied on the affected bundle
What the sources say 1
· Mastodon: “Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates.” Source