CVE-2026-45191

The perl-Net-CIDR-Lite module (versions before 0.24 ) contains a vulnerability where it fails to properly validate IP address and CIDR mask inputs . Specifically, the component does not account for extraneous zero characters in mask values (e.g., "/00" or "/01" ), which pass validation and parse ...

CVE-2026-45191

Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value. See also CVE-2026-45190...