CVE-2001-0733: The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arb...

Security readout for executives and security teams

CVE-2001-0733 is an old ePerl flaw where unsafe use of the #sinclude directive can let a remote attacker cause arbitrary code execution. Business urgency depends on whether any legacy ePerl 2.2.14 or earlier applications remain reachable, especially on public web servers. Likely limited to legacy web applications still using ePerl 2.2.14 or earlier. Exposure is highest where remote users can influence ePerl templates, sinclude targets, or included files. The source bundle lists no affected CPEs or downstream products. Prioritize discovery first. This is high impact if present, but probably rare because it affects very old ePerl versions. Internet-facing legacy hosts should be reviewed urgently, then retired, isolated, or remediated according to vendor guidance. Mitigation focus: Inventory systems for ePerl 2.2.14 or earlier.; Check vendor or maintainer guidance; no fixed version is named here.; Remove or replace unsupported ePerl deployments where possible..

Prepared

Jul 1, 2026, 07:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.