IP Input Validation Issue in Net::CIDR::Lite by Perl
CVE-2026-45190
Currently unrated
What is CVE-2026-45190?
The Net::CIDR::Lite library for Perl, prior to version 0.24, has a critical flaw in its input validation mechanism for IP addresses and CIDR masks. It improperly handles inputs containing trailing newlines or non-ASCII digits, which can lead to potential bypass of IP Access Control Lists (ACLs). This flaw allows crafted inputs to be incorrectly processed, resulting in false positives and negatives when searching for addresses. For instance, valid looking input may translate into an unexpected address after parsing, raising significant security concerns.
Affected Version(s)
Net::CIDR::Lite 0 < 0.24