Vulnerability in Rrwo Net::cidr::set
CVE-2026-49941
Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network ranges, then they were assumed to single IP a…
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Rrwo Net::cidr::set — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-49941?
- CVE-2026-49941 is a high-severity vulnerability in Rrwo Net::cidr::set, classified under Uncontrolled Recursion. CVSS score: 7.5/10. Published 2026-06-04.
- How severe is CVE-2026-49941?
- High severity. CVSS v3 base score is 7.5 out of 10.