CVE-2026-45190

A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like find() and bin_find() to incorrectly allow or deny access, compromising network security policies.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, ensure that all IP address and CIDR mask inputs processed by applications utilizing the Net::CIDR::Lite Perl module are strictly sanitized. This involves removing any trailing newline characters or non-ASCII digits from the input strings before they are passed to Net::CIDR::Lite functions such as add(), find(), or bin_find(). Implementing robust input validation at the application layer will prevent the module from misinterpreting malformed inputs and bypassing intended access controls.