CVE-2025-40920

HIGH

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library. * Data::UUID does not use a strong cryptographic source for gene...

Affects 0 products across 1 vendor.

BCS5.92
CVSS 3.18.6
EPSS0.4%
Percentile34th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact.
CWE Weakness Definitions
CWE-338: CWE-338
CWE-340: CWE-340
◆ SAGE Intelligence — CITED Relevance Research Team

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library, which does not use a strong cryptographic source for generating UUIDs. This can lead to predictable nonces, potentially allowing attackers to perform replay attacks or other nonce-related attacks.

BSID: BS-2025-GLOBAL-037112-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-40920?
Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library, which does not use a strong cryptographic source for generating UUIDs. This can lead to predictable nonces, potentially allowing attackers to perform replay attacks or other nonce-related attacks.
What is the CVSS score for CVE-2025-40920?
CVE-2025-40920 has CVSS 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L. EPSS: 0.4%.
Is CVE-2025-40920 actively exploited?
No confirmed active exploitation of CVE-2025-40920 as of 2026-05-30.
How do I remediate CVE-2025-40920?
Priority: HIGH.
What systems are affected by CVE-2025-40920?
CVE-2025-40920 affects: Catalyst.
Vulnerability Details
CVE IDCVE-2025-40920
BSIDBS-2025-GLOBAL-037112-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Published2025-08-11
Last Modified2026-04-15
ICS Relevance0%
Weakness (CWE)
CWE-338CWE-340
SourceNVD
Official Description

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library. * Data::UUID does not use a strong cryptographic source for generating UUIDs. * Data::UUID returns v3 UUIDs, which are generated from known information and are unsuitable for security, as per RFC 9562. * The nonces should be generated from a strong cryptographic source, as per RFC 7616.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability arises from the use of Data::UUID to generate nonces for authentication purposes. Data::UUID generates v3 UUIDs, which are based on known information and are not suitable for cryptographic purposes. This predictability can be exploited by attackers to forge authentication requests or perform replay attacks.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductFixed Version
Catalyst — —
Remediation

No patch URL on record. Monitor vendor security advisories directly.

Threat Intelligence
● Threat Intelligence Validated: July 2026 | Threat Age: 348 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash391b5cf057c59a6454fad5d73cafd852420ceff236bdcea678fcea4c794177e54818726ea4cbb1c353370d5117594bdc3b254f46d4df33ba49e25a66525b9a30
Related CVEs affecting Catalyst
CVE-2026-26009 9.9 Catalyst is a platform built for enterprise game server hosts, game communiti... CVE-2025-20341 8.8 A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an aut... CVE-2026-20086 8.6 A vulnerability in the processing of Control and Provisioning of Wireless Acc... CVE-2026-20084 8.6 A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could a... CVE-2026-20224 8.6 A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-W...
View all Catalyst CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider monitors 353,228 CVEs across ICS/OT vendors. SAGE-enriched alerts with virtual patches, NERC-CIP mapping, and PSIRT contacts delivered to your SIEM in minutes.

Join free →