← All advisories

High severity7.5NVD Advisory· Published May 21, 2026· Updated Jul 23, 2026

CVE-2026-46473

CVE-2026-46473

Description

Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand.

Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Tchatzi/Authen Totpreferences
Perl Foundation/Authen::TOTPllm-create
Range: <0.1.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.