CVE-2026-46473
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
May 21, 2026
Vendor
unknown
Description
Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.