CVE-2026-110681: CWE-416 Use After Free
Description
Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread. A parser object holds its callbacks and its incremental parse buffer as raw scalar pointers. When a thread is created, these are copied into the new interpreter unchanged, so the child's parser uses, and later frees, scalars that belong to the parent and may already have been freed there. A parser created before a thread starts and used inside it can call freed callbacks, corrupt reference counts and crash the process.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-110681 affects Cpanel::JSON::XS versions prior to 4.80 for Perl. The vulnerability occurs because parser objects hold callbacks and incremental parse buffers as raw scalar pointers. When a new thread is created, these pointers are copied unchanged into the child's interpreter, causing the child parser to use and free scalars owned by the parent. This use-after-free condition can result in freed callbacks being invoked, reference count corruption, and process crashes.
Potential Impact
Exploitation of this vulnerability can cause application crashes due to use-after-free conditions and corrupted reference counts. This may lead to denial of service or instability in applications using affected versions of Cpanel::JSON::XS in multithreaded Perl environments.
Mitigation Recommendations
No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using parser objects created before thread creation inside new threads.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- CPANSec
- Date Reserved
- 2026-10-14T13:25:47.112Z
- State
- PUBLISHED
Threat ID: 6ad662bc2cdf04f656803410
Added to database: 10/19/2026, 18:34:36 UTC
Last enriched: 10/19/2026, 18:48:44 UTC
Last updated: 10/19/2026, 22:27:02 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.