Ghostwire

CVE-2011-10043: Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting...

CRITICAL CVSS 9.8

Published: July 7, 2026 | Last Modified: July 7, 2026

Description

Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary code.

Ghostwire Analysis — What This Means Practically

Critical CVSS score indicates maximum severity — remote code execution, authentication bypass, or complete system compromise is likely possible.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References

dbugs.ptsecurity.com/vulnerability/PT-2026-56182
nvd.nist.gov/vuln/detail/CVE-2011-10043
www.tenable.com/cve/CVE-2011-10043
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2011-10043