Improper input validation in Communications Unified Assurance - CVE-2026-13221

Vulnerability identifier: #VU163353

CSH Severity: High

CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-13221

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to damange or delete data.

The vulnerability exists due to improper input validation within the Core (Perl) component in Oracle Communications Unified Assurance. A remote non-authenticated attacker can exploit this vulnerability to damange or delete data.

Communications Unified Assurance
Anolis OS
openEuler
perl-Fedora-VSP
perl-overloading
perl-Config-Extensions
perl-less
perl-deprecate
perl-DBM_Filter
perl-Module-Loaded
perl-PerlIO-via-QuotedPrint
perl-Object-HashBase-tools
perl-Object-HashBase
perl-Text-Glob
perl-CPAN-DistnameInfo
perl-MRO-Compat
perl-encoding-warnings
perl-Term-Table
perl-CPAN-Meta-YAML
perl-I18N-Langinfo
perl-Locale-Maketext-Simple
perl-Hash-Util
perl-experimental
perl-Importer
perl-ExtUtils-Constant
perl-Config-Perl-V
perl-Module-Load
perl-Sys-Syslog
perl-Params-Check
perl-IO-Socket-IP
perl-Module-Build
perl-I18N-LangTags
perl-bignum
perl-if
perl-lib
perl-Class-Struct
perl-NEXT
perl-Module-Load-Conditional
perl-Unicode-UCD
perl-HTTP-Tiny
perl-Devel-Size
perl-Filter-Simple
perl-Attribute-Handlers
perl-version
perl-Data-OptList
perl-File-Temp
perl-parent
perl-inc-latest
perl-Math-BigInt-FastCalc
perl-Sub-Install
perl-Sub-Exporter
perl-Math-BigRat
perl-Software-License
perl-Data-Section
perl-ExtUtils-CBuilder
perl-File-Fetch
perl-Tie-Memoize
perl-SelectSaver
perl-I18N-Collate
perl-Net
perl-Text-Abbrev
perl-Memoize
perl-Time
perl-filetest
perl-User-pwent
perl-subs
perl-IPC-Cmd
perl-File-HomeDir
perl-Env
perl-vmsish
perl-Encode-Locale
perl-DirHandle
perl-vars
perl-Devel-SelfStubber
perl-ExtUtils-Miniperl
perl-Tie-File
perl-Pod-Escapes
perl-blib
perl-Search-Dict
perl-Symbol
perl-File-stat
perl-sigtrap
perl-locale
perl-Perl-OSType
perl-IO-Zlib
perl-FileCache
perl-open
perl-autouse
perl-English
perl-Getopt-Std
perl-File-DosGlob
perl-generators
perl-Pod-Functions
perl-Fcntl
perl-NDBM_File
perl-ODBM_File
perl-Term-Cap
perl-Term-ReadLine
perl-GDBM_File
perl-Digest
perl-Hash-Util-FieldHash
perl-IPC-Open3
perl-Pod-Html
perl-File-Which
perl-SelfLoader
perl-Sys-Hostname
perl-mro
perl-Benchmark
perl-Devel-Peek
perl-Unicode-Normalize
perl-Errno
perl-Unicode-Collate
perl-Locale-Maketext
perl-IPC-System-Simple
perl-Test
perl-Time-Piece
perl-overload
perl-constant
perl-ExtUtils-Embed
perl-Module-Metadata
perl-File-Find
perl-diagnostics
perl-IO
perl-Tie-RefHash
perl-Text-Diff
perl-DynaLoader
perl-Opcode
perl-Carp
perl-FindBin
perl-Scalar-List-Utils
perl-debugger
perl-Text-Template
perl-Math-Complex
perl-Filter
perl-threads-shared
perl-Pod-Parser
perl-Archive-Zip
perl-ExtUtils-Manifest
perl-Pod-Checker
perl-URI
perl-B
perl-POSIX
perl-File-Compare
perl-Params-Util
perl-Package-Generator
perl-Time-Local
perl-Term-Complete
perl-DB_File
perl-Algorithm-Diff
perl-Time-HiRes
perl-Math-BigInt
perl-Test-Simple
perl-Pod-Usage
perl-FileHandle
perl-Text-Balanced
perl-sort
perl-IPC-SysV
perl-Thread-Semaphore
perl-File-Path
perl-ExtUtils-Install
perl-local-lib
perl-homedir
perl-threads
perl-fields
perl-Dumpvalue
perl-base
perl-Compress-Bzip2
perl-CPAN
perl-Socket
perl-autodie
perl-File-Copy
perl-Archive-Tar
perl-Safe
perl-Getopt-Long
perl-Net-Ping
perl-Digest-MD5
perl-File-Basename
perl-Compress-Raw-Bzip2
perl-IO-Compress-Lzma
perl-Compress-Raw-Lzma
perl-IO-Compress
perl-Compress-Raw-Zlib
perl-CPAN-Meta-Requirements
perl-Data-Dumper
perl-CPAN-Meta
perl-encoding
perl-Thread
perl-Encode
perl-Encode-devel
perl-libnet
perl-Thread-Queue
perl-MIME-Base64
perl-Storable
perl-Pod-Perldoc
perl-Text-ParseWords
perl-ExtUtils-ParseXS
perl-Pod-Simple
perl-Test-Harness
perl-Devel-PPPort
perl-PathTools
perl-JSON-PP
perl-Tie
perl-podlators
perl-Term-ANSIColor
perl
perl-devel
perl-interpreter
perl-libs
perl-macros
perl-tests
perl-libnetcfg
perl-utils
perl-meta-notation
perl-doc
perl-ph
perl-debugsource
perl-help
perl-debuginfo
perl-Exporter
perl-AutoSplit
perl-AutoLoader
perl-perlfaq
perl-Module-CoreList
perl-Module-CoreList-tools
perl-Digest-SHA
perl-ExtUtils-MakeMaker
perl-ExtUtils-MM-Utils
perl-ExtUtils-Command
perl-Text-Tabs+Wrap

Install updates from vendor's website.

perl-Fedora-VSP - update to 0.001-10
perl-overloading - update to 0.02-475
perl-Config-Extensions - update to 0.03-475
perl-less - update to 0.03-475
perl-deprecate - update to 0.04-475
perl-DBM_Filter - update to 0.06-475
perl-Module-Loaded - addressed in versions 0.08-423.0.1, 0.08-475
perl-PerlIO-via-QuotedPrint - update to 0.09-1
perl-Object-HashBase-tools - update to 0.009-4
perl-Object-HashBase - update to 0.009-4
perl-Text-Glob - update to 0.11-5
perl-CPAN-DistnameInfo - update to 0.12-13
perl-MRO-Compat - update to 0.13-5
perl-encoding-warnings - update to 0.13-475
perl-Term-Table - update to 0.015-2
perl-CPAN-Meta-YAML - update to 0.018-1001
perl-I18N-Langinfo - update to 0.19-475
perl-Locale-Maketext-Simple - addressed in versions 0.21-423.0.1, 0.21-475
perl-Hash-Util - update to 0.23-475
perl-experimental - update to 0.025-1
perl-Importer - update to 0.025-6
perl-ExtUtils-Constant - update to 0.25-475
perl-Config-Perl-V - update to 0.32-441
perl-Module-Load - update to 0.36-1
perl-Sys-Syslog - update to 0.36-1
perl-Params-Check - update to 0.38-396
perl-IO-Socket-IP - update to 0.41-2
perl-Module-Build - update to 0.42.31-5
perl-I18N-LangTags - update to 0.44-475
perl-bignum - update to 0.51-439
perl-if - update to 0.60.800-475
perl-lib - update to 0.65-475
perl-Class-Struct - update to 0.66-475
perl-NEXT - update to 0.67-475
perl-Module-Load-Conditional - update to 0.74-1
perl-Unicode-UCD - update to 0.75-475
perl-HTTP-Tiny - update to 0.078-1
perl-Devel-Size - update to 0.83-3
perl-Filter-Simple - update to 0.96-457
perl-Attribute-Handlers - addressed in versions 0.99-423.0.1, 1.01-475
perl-version - update to 0.99.29-1
perl-Data-OptList - update to 0.110-7
perl-File-Temp - update to 0.231.100-1
perl-parent - update to 0.238-457
perl-inc-latest - update to 0.500-10
perl-Math-BigInt-FastCalc - update to 0.500.900-1
perl-Sub-Install - update to 0.928-15
perl-Sub-Exporter - update to 0.987-17
perl-Math-BigRat - update to 0.2614-2
perl-Software-License - update to 0.103014-5
perl-Data-Section - update to 0.200007-8
perl-ExtUtils-CBuilder - update to 0.280236-1
perl-File-Fetch - update to 1.00-1
perl-Tie-Memoize - update to 1.1-475
perl-SelectSaver - update to 1.02-475
perl-I18N-Collate - update to 1.02-475
perl-Net - update to 1.02-475
perl-Text-Abbrev - update to 1.02-475
perl-Memoize - addressed in versions 1.03-423.0.1, 1.03-475
perl-Time - update to 1.03-475
perl-filetest - update to 1.03-475
perl-User-pwent - update to 1.03-475
perl-subs - update to 1.03-475
perl-IPC-Cmd - update to 1.04-2
perl-File-HomeDir - update to 1.004-6
perl-Env - update to 1.04-396
perl-vmsish - update to 1.04-475
perl-Encode-Locale - update to 1.05-10
perl-DirHandle - update to 1.05-475
perl-vars - update to 1.05-475
perl-Devel-SelfStubber - addressed in versions 1.06-423.0.1, 1.06-475
perl-ExtUtils-Miniperl - addressed in versions 1.06-423.0.1, 1.09-475
perl-Tie-File - update to 1.06-475
perl-Pod-Escapes - update to 1.07-396
perl-blib - update to 1.07-475
perl-Search-Dict - update to 1.07-475
perl-Symbol - update to 1.08-475
perl-File-stat - update to 1.09-475
perl-sigtrap - update to 1.09-475
perl-locale - update to 1.09-475
perl-Perl-OSType - update to 1.010-397
perl-IO-Zlib - addressed in versions 1.10-423.0.1, 1.10-475
perl-FileCache - update to 1.10-475
perl-open - addressed in versions 1.11-423.0.1, 1.12-475
perl-autouse - update to 1.11-475
perl-English - update to 1.11-475
perl-Getopt-Std - update to 1.12-475
perl-File-DosGlob - update to 1.12-475
perl-generators - update to 1.13-1
perl-Pod-Functions - update to 1.13-475
perl-Fcntl - update to 1.13-475
perl-NDBM_File - update to 1.15-475
perl-ODBM_File - update to 1.16-475
perl-Term-Cap - update to 1.17-396
perl-Term-ReadLine - update to 1.17-475
perl-GDBM_File - update to 1.18-475
perl-Digest - update to 1.20-1
perl-Hash-Util-FieldHash - update to 1.20-475
perl-IPC-Open3 - update to 1.21-475
perl-Pod-Html - addressed in versions 1.22.02-423.0.1, 1.25-475
perl-File-Which - update to 1.23-4
perl-SelfLoader - addressed in versions 1.23-423.0.1, 1.26-475
perl-Sys-Hostname - update to 1.23-475
perl-mro - update to 1.23-475
perl-Benchmark - update to 1.23-475
perl-Devel-Peek - addressed in versions 1.26-423.0.1, 1.28-475
perl-Unicode-Normalize - update to 1.27-458
perl-Errno - addressed in versions 1.28-423.0.1, 1.30-475
perl-Unicode-Collate - update to 1.29-1
perl-Locale-Maketext - update to 1.29-440
perl-IPC-System-Simple - update to 1.30-3
perl-Test - addressed in versions 1.30-423.0.1, 1.31-475
perl-Time-Piece - addressed in versions 1.31-423.0.1, 1.3401-475
perl-overload - update to 1.31-475
perl-constant - update to 1.33-1001
perl-ExtUtils-Embed - addressed in versions 1.34-423.0.1, 1.35-475
perl-Module-Metadata - update to 1.000037-1
perl-File-Find - update to 1.37-475
perl-diagnostics - update to 1.37-475
perl-IO - addressed in versions 1.38-423.0.1, 1.43-475
perl-Tie-RefHash - update to 1.39-475
perl-Text-Diff - update to 1.45-7
perl-DynaLoader - update to 1.47-475
perl-Opcode - update to 1.48-475
perl-Carp - update to 1.50-439
perl-FindBin - update to 1.51-475
perl-Scalar-List-Utils - update to 1.55-457
perl-debugger - update to 1.56-475
perl-Text-Template - update to 1.58-1
perl-Math-Complex - addressed in versions 1.59-423.0.1, 1.59-475
perl-Filter - update to 1.60-1
perl-threads-shared - update to 1.61-457
perl-Pod-Parser - update to 1.63-1001
perl-Archive-Zip - update to 1.68-3
perl-ExtUtils-Manifest - update to 1.73-1
perl-Pod-Checker - update to 1.74-1
perl-URI - update to 1.76-5
perl-B - update to 1.80-475
perl-POSIX - update to 1.94-475
perl-File-Compare - update to 1.100.600-475
perl-Params-Util - update to 1.102-2
perl-Package-Generator - update to 1.106-12
perl-Time-Local - update to 1.300-4
perl-Term-Complete - update to 1.403-475
perl-DB_File - update to 1.855-1
perl-Algorithm-Diff - update to 1.1903-10
perl-Time-HiRes - update to 1.9764-459
perl-Math-BigInt - update to 1.9998.18-1
perl-Test-Simple - update to 1.302181-2
perl-Pod-Usage - update to 2.01-1
perl-FileHandle - update to 2.03-475
perl-Text-Balanced - update to 2.04-1
perl-sort - update to 2.04-475
perl-IPC-SysV - update to 2.09-1
perl-Thread-Semaphore - update to 2.13-475
perl-File-Path - update to 2.16-439
perl-ExtUtils-Install - update to 2.20-1
perl-local-lib - update to 2.000024-7
perl-homedir - update to 2.000024-7
perl-threads - update to 2.25-457
perl-fields - update to 2.27-475
perl-Dumpvalue - update to 2.27-475
perl-base - update to 2.27-475
perl-Compress-Bzip2 - update to 2.28-2
perl-CPAN - update to 2.28-5
perl-Socket - update to 2.031-1
perl-autodie - update to 2.34-1
perl-File-Copy - update to 2.34-475
perl-Archive-Tar - update to 2.38-5
perl-Safe - update to 2.41-475
perl-Getopt-Long - update to 2.52-1
perl-Net-Ping - addressed in versions 2.55-423.0.1, 2.72-475
perl-Digest-MD5 - update to 2.58-1
perl-File-Basename - update to 2.85-475
perl-Compress-Raw-Bzip2 - update to 2.096-1
perl-IO-Compress-Lzma - update to 2.096-1
perl-Compress-Raw-Lzma - update to 2.096-1.0.1
perl-IO-Compress - update to 2.096-2
perl-Compress-Raw-Zlib - update to 2.096-2.0.1
perl-CPAN-Meta-Requirements - update to 2.140-397
perl-Data-Dumper - update to 2.174-440
perl-CPAN-Meta - update to 2.150010-397
perl-encoding - update to 3.00-461
perl-Thread - update to 3.05-475
perl-Encode - update to 3.08-461
perl-Encode-devel - update to 3.08-461
perl-libnet - update to 3.13-1
perl-Thread-Queue - update to 3.14-457
perl-MIME-Base64 - update to 3.15-1001
perl-Storable - update to 3.21-457
perl-Pod-Perldoc - update to 3.28.01-443
perl-Text-ParseWords - update to 3.30-396
perl-ExtUtils-ParseXS - update to 3.40-439
perl-Pod-Simple - update to 3.42-1
perl-Test-Harness - update to 3.42-2
perl-Devel-PPPort - update to 3.62-1
perl-PathTools - update to 3.78-439
perl-JSON-PP - update to 4.04-2
perl-Tie - update to 4.6-475
perl-podlators - update to 4.14-457
perl-Term-ANSIColor - update to 5.01-458
perl - addressed in versions 5.26.3-423.0.1, 5.32.1-475
perl-devel - addressed in versions 5.26.3-423.0.1, 5.32.1-475
perl-interpreter - addressed in versions 5.26.3-423.0.1, 5.32.1-475
perl-libs - addressed in versions 5.26.3-423.0.1, 5.32.1-475
perl-macros - addressed in versions 5.26.3-423.0.1, 5.32.1-475
perl-tests - update to 5.26.3-423.0.1
perl-libnetcfg - addressed in versions 5.26.3-423.0.1, 5.32.1-475
perl-utils - addressed in versions 5.26.3-423.0.1, 5.32.1-475
perl-meta-notation - update to 5.32.1-475
perl-doc - update to 5.32.1-475
perl-ph - update to 5.32.1-475
perl-devel - addressed in versions 5.38.0-14, 5.38.0-15
perl-debugsource - addressed in versions 5.38.0-14, 5.38.0-15
perl-libs - addressed in versions 5.38.0-14, 5.38.0-15
perl-help - addressed in versions 5.38.0-14, 5.38.0-15
perl-debuginfo - addressed in versions 5.38.0-14, 5.38.0-15
perl - addressed in versions 5.38.0-14, 5.38.0-15
perl-Exporter - update to 5.74-458
perl-AutoSplit - update to 5.74-475
perl-AutoLoader - update to 5.74-475
perl-perlfaq - update to 5.20210520-1
perl-Module-CoreList - update to 5.20211020-1
perl-Module-CoreList-tools - update to 5.20211020-1
perl-Digest-SHA - update to 6.02-2
perl-ExtUtils-MakeMaker - update to 7.46-3
perl-ExtUtils-MM-Utils - update to 7.46-3
perl-ExtUtils-Command - update to 7.46-3
perl-Text-Tabs+Wrap - update to 2013.0523-396

• https://www.oracle.com/security-alerts/cpuoct2026.html

• Multiple vulnerabilities in Communications Unified Assurance
• openEuler 24.03 LTS SP4 update for perl
• openEuler 24.03 LTS SP3 update for perl
• openEuler 24.03 LTS SP1 update for perl
• Anolis OS update for perl
• Anolis OS update for perl module