VULNERABILITY INTELLIGENCE

CVE-2026-49940

CVSS score6.5 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-06-04
Last modified2026-07-22
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks. Unicode digits such as the Arabic-Indic One (U+0661) were accepted but not properly parsed as numbers. This could allow network masks to accept larger networks.

Weakness classification

  • 9b29abf9-4ab0-4765-b253-1875cd9b441e: CWE-1289

Primary references