CVE-2026-45191: Stigtsp Net::cidr::lite

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value. See also CVE-2026-45190.

Affected products

• Stigtsp Net::cidr::lite: before 0.24 (fixed in 0.24)

Published 2026-05-10. Last modified 2026-07-24.