PT-2026-23123 · Unknown+1 · Unqlite For Perl+1

Published 2026-03-05 · Updated 2026-03-09 · CVE-2026-3257

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions UnQLite versions through 0.06 for Perl

Description The UnQLite for Perl module embeds the UnQLite library. Versions 0.06 and earlier of the Perl module utilize a 2014 version of the library that may be susceptible to a heap-based overflow.

Recommendations Update to a version of UnQLite for Perl newer than 0.06.

Fix

Weakness Enumeration

CWE-1395

Related Identifiers

CVE-2026-3257

Affected Products

Unqlite

Unqlite For Perl

References · 8

• https://osv.dev/vulnerability/CVE-2026-3257 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3257 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-3791 · Security Note
• https://metacpan.org/release/TOKUHIROM/UnQLite-0.07/source/Changes · Note
• https://unqlite.symisc.net · Note
• https://t.me/CVEtracker/46399 · Telegram Post
• https://twitter.com/oss_security/status/2030832184932614634 · Twitter Post
• https://twitter.com/CVEnew/status/2030755423658160290 · Twitter Post