ZeroDay Findings
Sign inSign up

Findings

CVE-2026-46473

Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand.

Published May 21, 2026 · updated Jul 23, 2026

Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. May 21, 2026 · NIST NVD

    Detected

    Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.

  2. Jul 23, 2026 · NIST NVD

    Updated

    Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.

Sources

  • CVE.orgVulnerability recordCVE-2026-46473

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-46473

    Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.

    nvd.nist.gov

References