CVE-2026-49942

Katalog CVE

CVSS 7.3 · High EPSS 0,49%

Kerentanan Improper Validation of Unsafe Equivalence in Input pada rrwo net. Skor CVSS 3.1 7.3 (High) menurut CISA ADP.

Deskripsi (NVD)

Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of a network mask could contain Unicode digits such as the Arabic-Indic One (U+0661), or non-digits, which were ignored. This could allow network masks to accept larger networks. Leading zeros were also accepted, but treated as decimal instead of octal. This could lead to confusion about what networks are acceptable.

Rincian

Terbit di NVD

4 Juni 2026

Terakhir diubah

22 Juli 2026

Status NVD

Analyzed

CVSS 3.1

7.3 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1289: Improper Validation of Unsafe Equivalence in Input

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nvd.nist.gov/vuln/detail/CVE-2025-40911 advisory pihak ketiga · pemerintah AS
• https://nvd.nist.gov/vuln/detail/CVE-2026-45191 advisory pihak ketiga · pemerintah AS
• https://metacpan.org/release/RRWO/Net-CIDR-Set-0.21/changes release notes