CVE-2026-45190: Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass
Last updated 19 June 2026
Other sources
Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libnet-cidr-lite-perlto a version that resolves this vulnerability.Fixed in 0.24-1 - Upgrade
Upgrade
Net::CIDR::Liteto a version that resolves this vulnerability.Fixed in 0.24
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45190?
CVE-2026-45190 is considered a medium severity vulnerability due to its potential for IP access control list (ACL) bypass.
How do I fix CVE-2026-45190?
To fix CVE-2026-45190, upgrade Net::CIDR::Lite to version 0.24 or later, where proper input validation is implemented.
What software is affected by CVE-2026-45190?
CVE-2026-45190 affects Net::CIDR::Lite versions before 0.24 for Perl.
Is CVE-2026-45190 a code execution vulnerability?
No, CVE-2026-45190 is not a code execution vulnerability; it specifically allows for IP ACL bypass due to improper validation.
What types of inputs are improperly validated in CVE-2026-45190?
CVE-2026-45190 involves improper validation of IP address and CIDR mask inputs.