PT-2026-39539

CVE-2026-45191

Published

2026-05-10

Updated

2026-06-18

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Net::CIDR::Lite versions prior to 0.24

Description Improper validation of CIDR mask values allows extraneous zero characters to be processed. Mask forms such as "/00" and "/01" pass validation and are parsed as the same prefix as their unpadded equivalents, which may lead to an IP Access Control List (ACL) bypass.

Recommendations Update to version 0.24 or later.

Exploitability

Exploit

Fix

Researchers

Stig Tsp

Stigtsp

Vendors

Affected products

Weakness enumeration

CWE-1289: Improper Validation of Unsafe Equivalence in Input

Related identifiers