Predictable Secret Generation in Trog::TOTP from Teodesian
CVE-2026-46474
Currently unrated
What is CVE-2026-46474?
Trog::TOTP versions prior to 1.006 employ Perl's built-in rand function to generate cryptographic secrets. This method is inherently predictable, posing significant security risks as attackers could potentially exploit these weaknesses to retrieve sensitive information. It's crucial to update to version 1.006 or later to ensure the integrity of the secret generation process.
Affected Version(s)
Trog::TOTP 0 < 1.006