CVE-2026-46473

CVE-2026-46473: Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand

Vendor Tchatzi

Product Authen::TOTP

Weakness CWE-331

Published May 21, 2026

Last update May 21, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.

Key dates

02Disclosure timeline

May 21, 2026 CVE published

May 21, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-46473 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/331.html

Related vulnerabilities

04Related CVE

CVE-2025-67504 WBCE CMS has Weak Random Number Generator in Password Generation Function CVE-2024-9055 DPA Countermeasures need reseeding CVE-2025-6931 D-Link DCS-6517/DCS-7517 Root Password Generation httpd generate_pass_from_mac entropy CVE-2026-46474 Trog::TOTP versions before 1.006 for Perl generate secrets using rand CVE-2021-36320