CVE-2026-46474
Severity CVSS v4.0:
Pending analysis
Type:
CWE-331
Insufficient Entropy
Publication date:
15/05/2026
Last modified:
15/05/2026
Description
Trog::TOTP versions before 1.006 for Perl generate secrets using rand.<br />
<br />
Secrets were generated using Perl&#39;s built-in rand function, which is predictable and unsuitable for security usage.