PT-2026-46266 · Cpan · Net::Cidr::Set

Published 2026-06-03 · Updated 2026-06-04 · CVE-2026-49940

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Net::CIDR::Set versions prior to 0.21

Description The software accepts non-ASCII IP addresses and netmasks. Unicode digits, such as the Arabic-Indic One (U+0661), are accepted but not properly parsed as numbers, which could allow network masks to accept larger networks than intended.

Recommendations Update to version 0.21.

Fix

Weakness Enumeration

CWE-1289

Related Identifiers

CVE-2026-49940

OPENSUSE-SU-2026:10951-1

Affected Products

Net::Cidr::Set

References · 6

• https://osv.dev/vulnerability/openSUSE-SU-2026:10951-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40911 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-49940 · Security Note
• https://suse.com/security/cve/CVE-2026-49941 · Note
• https://suse.com/security/cve/CVE-2026-49940 · Note
• https://metacpan.org/release/RRWO/Net-CIDR-Set-0.21/changes · Note