Security Advisory

CVE-2026-45191

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-10 20:15:53
Last updated 2026-05-11 16:37:48
Assigner CPANSec
CVSS score not scored
State PUBLISHED

Description

Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value. See also CVE-2026-45190.