CVE-2026-45191: Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass
Last updated 19 June 2026
Other sources
Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libnet-cidr-lite-perlto a version that resolves this vulnerability.Fixed in 0.24-1 - Upgrade
Upgrade
Perl Net::CIDR::Liteto a version that resolves this vulnerability.Fixed in 0.24
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45191?
CVE-2026-45191 is considered a high severity vulnerability due to its potential to allow IP ACL bypass.
How do I fix CVE-2026-45191?
To fix CVE-2026-45191, upgrade Net::CIDR::Lite to version 0.24 or later.
What versions are affected by CVE-2026-45191?
CVE-2026-45191 affects Net::CIDR::Lite versions prior to 0.24 for Perl.
What does CVE-2026-45191 exploit?
CVE-2026-45191 exploits improper handling of extraneous zero characters in CIDR mask values.
What is the potential impact of CVE-2026-45191?
The potential impact of CVE-2026-45191 is unauthorized access due to IP ACL bypass.