The perl-Net-CIDR-Lite package contained multiple validation flaws that could allow an attacker to bypass IP Access Control Lists (ACLs). Specifically, CVE-2026-45190 involves improper validation of trailing newlines or non-ASCII digits, CVE-2026-45191 concerns extraneous leading zeros in CIDR mask values, CVE-2026-40198 relates to missing validation of the IPv6 group count, and CVE-2026-40199 involves mishandling of IPv4 mapped IPv6 addresses. These issues collectively enable IP ACL bypass, potentially allowing unauthorized network access. The vulnerabilities were identified and fixed in a security update for SUSE Linux Enterprise Module for Development Tools 15 SP7 and related packages.

Successful exploitation of these vulnerabilities could allow an attacker to bypass IP-based access controls, potentially granting unauthorized network access or evading network restrictions enforced by IP ACLs. However, no known exploits are reported in the wild at this time.

A security update addressing these vulnerabilities has been released by the SUSE Product Security Team (advisory SUSE-SU-2026:2113-1). Applying this update to the affected perl-Net-CIDR-Lite package versions is the recommended remediation. Patch status is confirmed by the vendor advisory. No additional mitigation actions are indicated.