Network Mask Validation Flaw in Net::CIDR::Set for Perl

CVE-2026-49942

What is CVE-2026-49942?

The Net::CIDR::Set library for Perl is affected by a flaw in its handling of network masks. Specifically, versions through 0.20 fail to properly validate input, allowing certain Unicode characters and non-digit representations to be treated as valid network mask components. This could inadvertently enable larger network scopes than intended. Additionally, the acceptance of leading zeros in masks, treated as decimal rather than octal, could create significant confusion regarding the legitimacy of defined networks. This vulnerability poses a risk for applications relying on precise network definitions.

References