CVE-2026-11702

highCVSS 7.5covered by 1 sourcefirst seen 2026-06-26

Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes. When an object is initialised before forking, then the internal state for the PRNG is shared across processes and identical random streams will be produced. Secrets generated in multiprocess applications are predictable across processes.

⚡ Watch CVE-2026-11702

Get an email if CVE-2026-11702 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all EPSS-scored CVEs.

Advisory coverage (1)

highCVE-2026-11702: Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked…nvd · 2026-06-26

External references

NVD record for CVE-2026-11702

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-11702 status](https://www.csirts.com/badge/CVE-2026-11702)](https://www.csirts.com/cve/CVE-2026-11702)