CVE-2026-45180
High
Description
Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids. If the communication channel to the statsd daemon is not secured (for example, by sending UDP packets to a host on another network), then users' session ids may be leaked. This may allow an attacker to use session ids as authentication tokens.
SeverityHigh
CVSS7.5
Exploit probability—
ProductCatalyst::Plugin::Statsd
PublishedMay 10, 2026
First seenMay 10, 2026
Weakness typeCWE-319CWE-319
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| RRWO Catalyst::Plugin::Statsd | v ≤ 0.10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.