The vulnerability CVE-2026-19546 in perl-DBI involves arbitrary code execution through a caller-influenced Profile attribute, representing an incomplete fix of a prior vulnerability CVE-2026-14380. The DBI API provides a consistent database interface for Perl applications. Red Hat has issued an updated perl-DBI package for Red Hat Enterprise Linux 10 to address this issue. The advisory does not include a CVSS score but classifies the security impact as Important. Multiple architectures and update support levels are covered by the update.

The vulnerability allows arbitrary code execution, which can lead to full compromise of affected systems running vulnerable versions of perl-DBI. This can enable attackers to execute malicious code with the privileges of the affected application. The advisory rates the impact as Important, indicating a high risk to affected systems if unpatched.

Red Hat has released updated perl-DBI packages for Red Hat Enterprise Linux 10 and its variants to address this vulnerability. Users should apply these official updates as described in the Red Hat advisory (https://access.redhat.com/articles/11258) to remediate the issue. Since an official fix is available, applying the update is the recommended mitigation.