A vulnerability was found in BVA Concierge::Sessions up to 0.8.4 on Perl and classified as problematic. Affected is the function rand. The manipulation results in generation of predictable numbers or identifiers.

This vulnerability is cataloged as CVE-2026-2439. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.