CVE-2026-15043
CVE-2026-15043 is a critical-severity vulnerability with a CVSS 3.x base score of 9.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-480.
Key facts
- Severity: Critical (CVSS 3.x base score 9.8)
- EPSS exploit prediction: 0% (32nd percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-480
- Published:
- Last modified:
Description
DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the is_matched method, <= was evaluated using Perl's ge operator, and >= was evaluated using Perl's le operator. SQL::Nano is the fallback query engine for DBI's file-backed drivers (DBD::File, DBD::DBM, CSV-style drivers) whenever SQL::Statement is not installed, and is forced whenever DBI_SQL_NANO=1. Queries over such tables use these predicates directly. The impact depends on the context. Where an application relies on a WHERE clause to filter file-backed data for policy or authorization, an inverted <=/>= comparison silently returns the wrong rows.
Frequently asked questions
- What is CVE-2026-15043?
- DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the is_matched method, <= was evaluated using Perl's ge operator, and >= was evaluated using Perl's le operator. SQL::Nano is the fallback query engine for DBI's file-backed drivers (DBD::File, DBD::DBM, CSV-style drivers) whenever SQL::Statement is not installed, and is forced whenever DBI_SQL_NANO=1. Queries over such tables use these predicates directly. The impact depends on the context. Where an application relies on a WHERE clause to filter file-backed data for policy or authorization, an inverted <=/>= comparison silently returns the wrong rows.
- How severe is CVE-2026-15043?
- CVE-2026-15043 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2026-15043 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (32nd percentile), an estimate of the probability of exploitation in the next 30 days.
- How do I fix CVE-2026-15043?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2026-15043 published?
- CVE-2026-15043 was published on 2026-07-14.
References
- https://github.com/perl5-dbi/dbi/commit/e9742ef85a75867cbd696860e3bf3e32b681f98d.patch
- https://github.com/perl5-dbi/dbi/security/advisories/GHSA-mv45-ff6j-x9jp
- https://metacpan.org/release/HMBRAND/DBI-1.651/changes
- http://www.openwall.com/lists/oss-security/2026/07/14/9
Other CWE-480 vulnerabilities
- CVE-2026-43114 — Critical (CVSS 9.4): In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return…
- CVE-2026-4748 — High (CVSS 7.5): A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y)…
- CVE-2022-1947 — Medium (CVSS 6.5): Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3.
- CVE-2026-44722 — Medium (CVSS 6.2): pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a…
- CVE-2026-48497 — Medium (CVSS 5.9): Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7,…
- CVE-2025-52985 — Medium (CVSS 5.3): A Use of Incorrect Operator vulnerability in the Routing Engine firewall of Juniper Networks Junos OS Evolved allows…