Loading story…
A command-execution vulnerability tracked as CVE-2012-6329 was disclosed in Perl's Locale::Maketext implementation, specifically in the _compile function of Maketext.pm. The flaw affects Perl versions before 5.17.7, where bracket-notation compilation fails to safely handle backslashes and fully qualified method names, allowing crafted translation-string input to trigger unintended command execution in vulnerable applications.
The issue was highlighted as affecting wiki platforms that relied on the vulnerable Perl component, including TWiki before 5.1.3 and Foswiki versions 1.0.x through 1.0.10 and 1.1.x through 1.1.6. The vulnerability is relevant where applications accept user-supplied translation strings, creating a path for attackers to exploit localization features to run commands on the underlying system.
See affected versions and whether adversaries are exploiting it.
3 events from the most recent confirmed update back to the earliest known activity.
The CVE entry for CVE-2012-6329 was later updated. The record notes an update date of 2016-12-06.
MITRE published CVE-2012-6329 for a command-execution vulnerability in Perl's Locale::Maketext implementation that could be exploited through crafted translation-string input. The record cites TWiki before 5.1.3 and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6 as affected examples.
A command-execution vulnerability in the _compile function of Maketext.pm affected Perl versions before 5.17.7. The CVE record references Perl commit 1735f6f53ca19f99c6e9e39496c486af323ba6a8 as related to the fix.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A critical vulnerability, CVE-2025-46295, has been identified in Apache Commons Text, allowing for potential remote code execution when untrusted input is passed into the text-substitution API. The flaw, which affects versions prior to 1.10.0, stems from the abuse of interpolation features that could trigger command execution or access to external resources. Security researchers warn that exploitation of this vulnerability could result in total server takeover if left unpatched, and the issue has been fully addressed in FileMaker Server 22.0.4. Organizations using Apache Commons Text in their applications are urged to update to the latest version to mitigate the risk. The vulnerability has been rated with a CVSS score of 9.8, underscoring its severity and the urgency for remediation. No specific products have been listed as affected yet, but the risk applies broadly to any software leveraging vulnerable versions of the library.
Jun 29, 2026
German government CERT advisories disclosed multiple vulnerabilities in **FontForge** packages for **Red Hat Enterprise Linux**, warning that the flaws could allow **arbitrary code execution**. One advisory described **multiple vulnerabilities** affecting the font editor, while a later notice highlighted an additional vulnerability with the same impact, indicating continued security issues in the software component. The notices identify FontForge on Red Hat Enterprise Linux as the affected product and classify the risk as code execution, a high-impact outcome that can let attackers run malicious code on vulnerable systems. Organizations using FontForge in Red Hat Enterprise Linux environments should review the relevant vendor advisories, determine affected package versions, and prioritize patching or other remediation to reduce exposure.
Jun 29, 2026
The CPAN Security Group disclosed two memory-safety vulnerabilities affecting widely used Perl modules. **CVE-2026-7040** impacts `Text::Minify::XS` from `v0.3.0` before `v0.7.8`, where malformed UTF-8 input can trigger a heap overflow in the `minify` and `minify_utf8` functions, leading to heap corruption through improper Unicode handling. Maintainers advised users to upgrade to `v0.7.8` or later, and said deployments that cannot patch immediately should validate strings before passing them to the affected routines. A separate advisory, **CVE-2026-7111**, affects `Text::CSV_XS` before `1.62` and stems from a use-after-free when registered callbacks extend the Perl argument stack. The bug arises because methods including `Parse`, `print`, `getline`, and `getline_all` may retain a stale stack pointer across callback execution, creating a path to type confusion, memory corruption, crashes, or logic errors. The issue does not affect `Text::CSV_XS` instances that do not use registered callbacks, and the fix was released in version `1.62` after a public patch and CPAN publication.
Jun 29, 2026