CVE Catalog
CVE-2026-45191
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.30%
22th percentile - higher than 22% of all known CVEs
Summary
In Net::CIDR::Lite for Perl (versions before 0.24), extraneous zero characters in CIDR mask values are not properly considered, which may allow IP ACL bypass. Masks like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value.
Risk Assessment
An attacker can bypass CIDR-based ACL rules, gaining unauthorized access to network resources.
Recommendation
Update Net::CIDR::Lite to version 0.24 or later.
Original NVD description (English source)
Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value. See also CVE-2026-45190.