CVE-2026-86287: Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths

As cited

Copy frozen at 2026-09-07 22:59 UTC (site build).

vulnerabilities

CVE-2026-86287: Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths

CVE-2026-86287 affects Net::IP::LPM, a Perl module for IP longest prefix matching, in versions before 1.12. The vulnerability allows acceptance of malformed prefix lengths, which could lead to unexpected behavior or security issues in applications that rely on this module for IP address processing.

Why it matters: Perl developers and system administrators using Net::IP::LPM for IP routing or access control logic must upgrade to version 1.12 or later to prevent potential bypass or logic errors caused by malformed input.

Source published

2026-09-07 18:40 UTC

First seen by Cybersecurity Tracker

2026-09-07 22:35 UTC