A vulnerability classified as problematic has been found in JDEGUEST Apache::API::Password up to 0.5.2 on Perl. The affected element is the function
Crypt::Urandom. The manipulation leads to cryptographically weak prng.
This vulnerability is documented as CVE-2026-5088. The attack can be initiated remotely. There is not any exploit available.