CVE-2026-46474 | BDVDB-2026-333642 Detail
TEODESIANTrog::TOTP
Description#
Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
Impact#
CAPEC-114 Authentication Abuse
Weaknesses#
- CWE-331 Insufficient Entropy
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.