CVE-2026-4176: Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
Overview
- Severity
- Critical (CVSS 9.8)
- CVSS Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Exploit Status
- Not Exploited
- Patch Tuesday
- 2026-Mar
- Released
- 2026-04-01
- Last Updated
- 2026-04-15
Affected Products (32)
Open Source Software
- cbl2 boost 1.76.0-4 on CBL Mariner 2.0
- cbl2 ceph 16.2.10-11 on CBL Mariner 2.0
- cbl2 cloud-hypervisor 32.0-7 on CBL Mariner 2.0
- cbl2 cloud-hypervisor-cvm 38.0.72.2-5 on CBL Mariner 2.0
- azl3 binutils 2.41-10 on Azure Linux 3.0
- azl3 boost 1.83.0-2 on Azure Linux 3.0
- cbl2 freetype 2.13.1-2 on CBL Mariner 2.0
- azl3 freetype 2.13.2-2 on Azure Linux 3.0
- azl3 gdb 13.2-6 on Azure Linux 3.0
- cbl2 keras 2.11.0-3 on CBL Mariner 2.0
- cbl2 nmap 7.93-4 on CBL Mariner 2.0
- cbl2 python-tensorflow-estimator 2.11.0-2 on CBL Mariner 2.0
- azl3 nodejs24 24.13.0-3 on Azure Linux 3.0
- cbl2 rubygem-mini_portile2 2.8.0-1 on CBL Mariner 2.0
- cbl2 rust 1.72.0-15 on CBL Mariner 2.0
- azl3 rubygem-mini_portile2 2.8.4-1 on Azure Linux 3.0
- azl3 rust 1.75.0-27 on Azure Linux 3.0
- azl3 rust 1.90.0-6 on Azure Linux 3.0
Other
- 21145-17086
- 21154-17084
- 21119-17084
- 21095-17084
- 17438-17086
- 21130-17086
- 21135-17084
- 19847-17084
- 20706-17086
- 20732-17084
Mariner
- cbl2 tcl 8.6.13-3 on CBL Mariner 2.0
- azl3 qtbase 6.6.3-4 on Azure Linux 3.0
- cbl2 zlib 1.2.13-2 on CBL Mariner 2.0
- azl3 tcl 8.6.13-3 on Azure Linux 3.0
Revision History
- 2026-04-01: Information published.
- 2026-04-02: Information published.
- 2026-04-14: Information published.
- 2026-04-15: Information published.