CVE-2026-86287

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succeed for every address. An allow-list will allow every address, and a deny-list will block every address.

• CWE-1287

• https://github.com/robrwo/perl-Net-IP-LPM/commit/814f8baa85537827db8c3b3d251e48db7aca318f.patch
• https://metacpan.org/release/RRWO/Net-IP-LPM-1.12/changes
• https://www.openwall.com/lists/oss-security/2026/09/07/1

Published

Sep 7, 2026

Last Modified

Sep 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-86280A vulnerability was identified in SourceCodester Syllabus-Al…5.3
• CVE-2026-86281A security flaw has been discovered in SourceCodester Syllab…4.3
• CVE-2026-86282A weakness has been identified in jaychouchannel Tourism-Man…7.3
• CVE-2026-86283MISP's UiBeta theme collection view (app/View/Themed/UiBeta/…7.1
• CVE-2026-86284A security vulnerability has been detected in jaychouchannel…5.3
• CVE-2026-86285A vulnerability was detected in BookStack up to 26.05.2. Aff…4.3
• CVE-2026-86288A vulnerability has been found in ModelCloud GPTQModel up to…6.3
• CVE-2026-86289A vulnerability was found in Ollama up to 0.31.1. This issue…4.3
• CVE-2026-8629Crabbox prior to v0.12.0 contains a privilege escalation vul…8.6
• CVE-2026-86290A weakness has been identified in SourceCodester Online Voti…7.3
• CVE-2026-86291A security vulnerability has been detected in itsourcecode S…6.3
• CVE-2026-86292A vulnerability was detected in SourceCodester Simple Traffi…7.3