CVE-2026-9641

Summary

Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations.

The default algorithm is HMAC-SHA1, which should only be used for legacy systems.

These versions default to using 1000 iterations.

Depending on the chosen algorithm, 220,000 to 1,400,000 iterations should be used.

Affected Software

Weaknesses

• CWE-916: CWE-916 Use of Password Hash With Insufficient Computational Effort

Workarounds

Change the default algorithm to something stronger, such as "HMACSHA2", and the output_len accordingly (32 for SHA256).

The number of iterations should also be increased (600,000 for SHA256, for example).

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2026/06/12/5
• http://www.openwall.com/lists/oss-security/2026/06/13/1
• http://www.openwall.com/lists/oss-security/2026/06/14/1
• http://www.openwall.com/lists/oss-security/2026/06/14/2
• http://www.openwall.com/lists/oss-security/2026/06/14/3

References

• https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2
• https://metacpan.org/release/ARODLAND/Crypt-PBKDF2-0.261630/changes

• ←Previous
• Next→