CVE-2026-41564

OVERVIEW CVE-2026-41564 is a cryptographic weakness in CryptX Perl library versions before 0.088 affecting multiple cryptographic modules (Crypt::PK::RSA, DSA, DH, ECC, Ed25519, and X25519). The vulnerability stems from the library's failure to reseed its pseudorandom number generator after a fork operation, causing child processes to inherit identical PRNG state from the parent process. This is particularly problematic in preforking server architectures such as Starman web servers, where cryptographic objects initialized at startup are shared across all worker processes. SEVERITY The vulnerability carries a CVSS v3.1 score of 7.5 (HIGH) with network-based attack vector, low complexity, and no authentication requirements. The impact is confined to confidentiality loss, as attackers can recover private signing keys through nonce-reuse attacks by collecting just two ECDSA or DSA signatures generated from different processes using the same seeded PRNG state. While the EPSS score of 0.00018 suggests low overall prevalence, the cryptographic implications are serious for affected deployments. EXPLOITATION STATUS There is no current evidence of active exploitation in the wild, as indicated by the absence from the CISA Known Exploited Vulnerabilities catalog and inactive status on threat hotlists. No public exploit code has been documented. However, the mathematical feasibility of key recovery through nonce reuse makes this a concern for organizations running vulnerable CryptX versions in multiprocess environments, warranting prompt patching to version 0.088 or later.