Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-26666575ae advisory.

    Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks  since     these versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the     underlying hash or password. Version 0.10026 of the module fixes this issue.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-af4f5feae8 advisory.

    Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks  since     these versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the     underlying hash or password. Version 0.10026 of the module fixes this issue.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These     versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying     hash or password. (CVE-2026-5091)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
318217	Fedora 44 : perl-Catalyst-Plugin-Authentication (2026-26666575ae)	Nessus	Fedora Local Security Checks	high
318195	Fedora 43 : perl-Catalyst-Plugin-Authentication (2026-af4f5feae8)	Nessus	Fedora Local Security Checks	high
316720	Linux Distros Unpatched Vulnerability : CVE-2026-5091	Nessus	Misc.	critical

Detections

Analytics

CVE-2026-5091

high

Tenable Plugins

high

high

critical