🟠 High | Source: Microsoft Security Response Center
CVE-2026-60082 is a vulnerability in the Perl DBI (Database Interface) module affecting versions prior to 1.651, where statement handle consistency with row data is not properly enforced. This could allow unexpected or inconsistent data to be returned from database queries, potentially leading to data integrity issues or exploitation depending on application context. Environments running Perl-based applications on Azure that rely on the DBI module for database connectivity should treat this as a priority patching item.
Security Architect’s Take: Audit any Azure-hosted workloads or pipelines running Perl applications that use the DBI module and ensure the package is upgraded to version 1.651 or later; pay particular attention to containerised or serverless environments where dependency versions may not be centrally managed.
Original advisory: CVE-2026-60082 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row