Is CVE-2026-5082 actively exploited?

No active exploitation of CVE-2026-5082 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-5082 be exploited remotely?

Yes. CVE-2026-5082 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-5082?

CVE-2026-5082 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2026-5082

MEDIUM

CVE-2026-5082

CWE-338Published: April 8, 2026· Updated: Apr 8, 2026

5.3

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:4.0th

Official Description

Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id.

The generate_session_id function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it generates bytes using SHA-1 hash seeded with the built-in rand() function, the PID, and the high resolution epoch time. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.

Amon2::Plugin::Web::CSRFDefender versions before 7.00 were part of Amon2, which was vulnerable to insecure session ids due to CVE-2025-15604.

Note that the author has deprecated this module.

NVD Source

Technical Analysis

CVE-2026-5082 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.