CVE-2026-4851 is a critical arbitrary code execution vulnerability (CVSS 9.8) affecting GRID::Machine versions through 0.127 for Perl. This flaw allows a compromised or malicious remote host to execute arbitrary code on the client system due to unsafe deserialization of return values during Remote Procedure Calls. The vulnerability is network-exploitable with low attack complexity, requiring no authentication or user interaction, and can lead to a complete compromise of the client's confidentiality, integrity, and availability. Despite its severity, there is currently no evidence of active exploitation, and no public exploit modules are available. Community discussion and media coverage surrounding this CVE remain minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 0.127CPE matchmatch criteria | cpe:2.3:a:casiano:grid\:\:machine:*:*:*:*:*:perl:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.