CVE-2025-40926 | KAZEBURO Plack::Middleware::Session::Simple up to 0.04 on Perl Default Session ID Generator rand generation of predictable numbers or identifiers

A vulnerability was found in KAZEBURO Plack::Middleware::Session::Simple up to 0.04 on Perl and classified as problematic. This affects the function rand of the component Default Session ID Generator. Such manipulation leads to generation of predictable numbers or identifiers.

This vulnerability is traded as CVE-2025-40926. The attack may be launched remotely. There is no exploit available.

It is advisable to implement a patch to correct this issue.