CVE-2026-45190Disclosure

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result. Example: my $cidr = Net::CIDR::Lite->new(); $cidr->add("::1\n/128"); $cidr->find("::1a"); # incorrectly returns true See also CVE-2026-45191.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-1289

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-05-10); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

Open Source Security mailing list@oss_security147d
Disclosure
Perl CPAN: CVE-2026-45190: Net::CIDR::Lite before 0.24 does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass https://www.openwall.com/lists/oss-security/2026/05/10/6 CVE-2026-45191: ditto with extraneous zero characters in CIDR mask values https://www.openwall.com/lists/oss-security/2026/05/10/7
Post summary
The advisory discloses two CVEs in Net::CIDR::Lite that allow IP ACL bypass due to malformed IP/CIDR input handling; no PoC, exploit, patch, or active exploitation information is provided.
10000119
4.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds151d
Disclosure
CVE-2026-45190 Input Validation Bypass in Net::CIDR::Lite Before 0.24 for Perl https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45190
Post summary
The post announces CVE-2026-45190, detailing an input validation bypass in Net::CIDR::Lite prior to version 0.24, but provides no further exploit, mitigation, or active usage information.
0000086
4.0K followersView on X

Explore more

Back to dashboard