By vendor

Pevans vulnerabilities

Known CVEs affecting Pevans products, prioritized by severity, with SEC.co remediation and detection guidance.

2 published vulnerabilities

• CVE-2026-50637HIGH 8.2

  Metrics::Any::Adapter::Statsd, a Perl library for sending metrics to StatsD servers, fails to sanitize metric names and values before transmission. An attacker can inject additional metrics into a single StatsD packet by embedding newlines and special control characters (colons, pipes) in metric data. This allows manipulation of monitoring data without authentication, potentially causing false alerts, hiding real issues, or poisoning observability systems that other services depend on. The vulnerability affects all versions before 0.04, which introduced input validation to block problematic characters.

• CVE-2026-50639MEDIUM 6.5

  A Perl metrics reporting library fails to validate input containing special characters, allowing attackers to inject fake metrics into monitoring systems. The vulnerability affects Metrics::Any::Adapter::SignalFx versions before 0.04, which extends statsd protocol support but does not properly filter newlines and control characters in metric labels. An attacker could craft requests with embedded metric definitions to pollute monitoring data, potentially masking real system issues or triggering false alerts.