Vulnerability-Lookup

OPENSUSE-SU-2026:11411-1

Vulnerability from csaf_opensuse - Published: 2026-07-31 00:00 - Updated: 2026-07-31 00:00

Summary

dnsdist-2.0.7-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: dnsdist-2.0.7-1.1 on GA media

Description of the patch: These are all security issues fixed in the dnsdist-2.0.7-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-11411

CVE-2026-40011

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-40208

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-40209

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-40210

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-40211

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-42004

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-42005

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

23 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2026-40011/	self
https://www.suse.com/security/cve/CVE-2026-40208/	self
https://www.suse.com/security/cve/CVE-2026-40209/	self
https://www.suse.com/security/cve/CVE-2026-40210/	self
https://www.suse.com/security/cve/CVE-2026-40211/	self
https://www.suse.com/security/cve/CVE-2026-42004/	self
https://www.suse.com/security/cve/CVE-2026-42005/	self
https://www.suse.com/security/cve/CVE-2026-40011	external
https://bugzilla.suse.com/1269204	external
https://www.suse.com/security/cve/CVE-2026-40208	external
https://bugzilla.suse.com/1269207	external
https://www.suse.com/security/cve/CVE-2026-40209	external
https://bugzilla.suse.com/1269206	external
https://www.suse.com/security/cve/CVE-2026-40210	external
https://bugzilla.suse.com/1269205	external
https://www.suse.com/security/cve/CVE-2026-40211	external
https://bugzilla.suse.com/1269203	external
https://www.suse.com/security/cve/CVE-2026-42004	external
https://bugzilla.suse.com/1269202	external
https://www.suse.com/security/cve/CVE-2026-42005	external
https://bugzilla.suse.com/1269201	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "dnsdist-2.0.7-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the dnsdist-2.0.7-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11411",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11411-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40011 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40011/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40208 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40208/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40209 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40209/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40210 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40210/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40211 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40211/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-42004 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-42004/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-42005 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-42005/"
      }
    ],
    "title": "dnsdist-2.0.7-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-07-31T00:00:00Z",
      "generator": {
        "date": "2026-07-31T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11411-1",
      "initial_release_date": "2026-07-31T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-07-31T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsdist-2.0.7-1.1.aarch64",
                "product": {
                  "name": "dnsdist-2.0.7-1.1.aarch64",
                  "product_id": "dnsdist-2.0.7-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsdist-2.0.7-1.1.ppc64le",
                "product": {
                  "name": "dnsdist-2.0.7-1.1.ppc64le",
                  "product_id": "dnsdist-2.0.7-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsdist-2.0.7-1.1.s390x",
                "product": {
                  "name": "dnsdist-2.0.7-1.1.s390x",
                  "product_id": "dnsdist-2.0.7-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsdist-2.0.7-1.1.x86_64",
                "product": {
                  "name": "dnsdist-2.0.7-1.1.x86_64",
                  "product_id": "dnsdist-2.0.7-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-2.0.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64"
        },
        "product_reference": "dnsdist-2.0.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-2.0.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le"
        },
        "product_reference": "dnsdist-2.0.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-2.0.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x"
        },
        "product_reference": "dnsdist-2.0.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-2.0.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
        },
        "product_reference": "dnsdist-2.0.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-40011",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40011"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40011",
          "url": "https://www.suse.com/security/cve/CVE-2026-40011"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269204 for CVE-2026-40011",
          "url": "https://bugzilla.suse.com/1269204"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-31T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-40011"
    },
    {
      "cve": "CVE-2026-40208",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40208"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40208",
          "url": "https://www.suse.com/security/cve/CVE-2026-40208"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269207 for CVE-2026-40208",
          "url": "https://bugzilla.suse.com/1269207"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-31T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-40208"
    },
    {
      "cve": "CVE-2026-40209",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40209"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or if the process runs out of file descriptors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40209",
          "url": "https://www.suse.com/security/cve/CVE-2026-40209"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269206 for CVE-2026-40209",
          "url": "https://bugzilla.suse.com/1269206"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-31T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-40209"
    },
    {
      "cve": "CVE-2026-40210",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40210"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40210",
          "url": "https://www.suse.com/security/cve/CVE-2026-40210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269205 for CVE-2026-40210",
          "url": "https://bugzilla.suse.com/1269205"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-31T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-40210"
    },
    {
      "cve": "CVE-2026-40211",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40211"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40211",
          "url": "https://www.suse.com/security/cve/CVE-2026-40211"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269203 for CVE-2026-40211",
          "url": "https://bugzilla.suse.com/1269203"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-31T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-40211"
    },
    {
      "cve": "CVE-2026-42004",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-42004"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist\u0027s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-42004",
          "url": "https://www.suse.com/security/cve/CVE-2026-42004"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269202 for CVE-2026-42004",
          "url": "https://bugzilla.suse.com/1269202"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-31T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-42004"
    },
    {
      "cve": "CVE-2026-42005",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-42005"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker can send a web request that causes unlimited memory \nallocation in the internal web server, leading to a denial of service. \nThe internal web server is disabled by default.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
          "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-42005",
          "url": "https://www.suse.com/security/cve/CVE-2026-42005"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269201 for CVE-2026-42005",
          "url": "https://bugzilla.suse.com/1269201"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.aarch64",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.ppc64le",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.s390x",
            "openSUSE Tumbleweed:dnsdist-2.0.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-31T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-42005"
    }
  ]
}

CVE-2026-40011 (GCVE-0-2026-40011)

Vulnerability from cvelistv5 – Published: 2026-06-25 12:22 – Updated: 2026-06-25 13:23

Title

Prometheus denial of service via crafted DNS queries

Summary

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

Improper Encoding or Escaping of Output
CWE-116 - Improper Encoding or Escaping of Output

Assigner

References

1 reference

URL	Tags
https://www.dnsdist.org/security-advisories/power…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	DNSdist	Affected: 1.9.0 , < 1.9.15 (semver) Affected: 2.0.0 , < 2.0.7 (semver)

Date Public

2026-06-24 22:00

Credits

Haruki Oyama (Waseda University)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40011",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:23:09.989984Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-116",
                "description": "CWE-116 Improper Encoding or Escaping of Output",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:23:46.840Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "Prometheus export"
          ],
          "packageName": "dnsdist",
          "product": "DNSdist",
          "programFiles": [
            "dnsdist-web.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "1.9.15",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.0.7",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Haruki Oyama (Waseda University)"
        }
      ],
      "datePublic": "2026-06-24T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.\u003c/p\u003e"
            }
          ],
          "value": "An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Improper Encoding or Escaping of Output",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T12:22:19.248Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Prometheus denial of service via crafted DNS queries",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-40011",
    "datePublished": "2026-06-25T12:22:19.248Z",
    "dateReserved": "2026-04-08T09:59:59.341Z",
    "dateUpdated": "2026-06-25T13:23:46.840Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40208 (GCVE-0-2026-40208)

Vulnerability from cvelistv5 – Published: 2026-06-25 12:22 – Updated: 2026-06-25 13:24

Title

Denial of service via DoH3 queries

Summary

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

Incorrect Control Flow Scoping
CWE-705 - Incorrect Control Flow Scoping

Assigner

References

1 reference

URL	Tags
https://www.dnsdist.org/security-advisories/power…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	DNSdist	Affected: 1.9.0 , < 1.9.15 (semver) Affected: 2.0.0 , < 2.0.7 (semver)

Date Public

2026-06-24 22:00

Credits

ylwango613

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40208",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:24:51.405029Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-705",
                "description": "CWE-705 Incorrect Control Flow Scoping",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:24:55.798Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "DNS over HTTP3"
          ],
          "packageName": "dnsdist",
          "product": "DNSdist",
          "programFiles": [
            "doh3.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "1.9.15",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.0.7",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "ylwango613"
        }
      ],
      "datePublic": "2026-06-24T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame.\u003c/p\u003e"
            }
          ],
          "value": "An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Incorrect Control Flow Scoping",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T12:22:42.722Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Denial of service via DoH3 queries",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-40208",
    "datePublished": "2026-06-25T12:22:42.722Z",
    "dateReserved": "2026-04-10T07:11:39.060Z",
    "dateUpdated": "2026-06-25T13:24:55.798Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40209 (GCVE-0-2026-40209)

Vulnerability from cvelistv5 – Published: 2026-06-25 12:23 – Updated: 2026-06-25 13:56

Title

Denial of service via IXFR queries

Summary

An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or if the process runs out of file descriptors.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

Missing Release of Resource after Effective Lifetime
CWE-772 - Missing Release of Resource after Effective Lifetime

Assigner

References

1 reference

URL	Tags
https://www.dnsdist.org/security-advisories/power…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	DNSdist	Affected: 1.9.0 , < 1.9.15 (semver) Affected: 2.0.0 , < 2.0.7 (semver)

Date Public

2026-06-24 22:00

Credits

Qifan Zhang (Palo Alto Networks)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40209",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:56:17.791790Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-772",
                "description": "CWE-772 Missing Release of Resource after Effective Lifetime",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:56:22.793Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "DNS over TCP to the backend"
          ],
          "packageName": "dnsdist",
          "product": "DNSdist",
          "programFiles": [
            "dnsdist-tcp-downstream.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "1.9.15",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.0.7",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Qifan Zhang (Palo Alto Networks)"
        }
      ],
      "datePublic": "2026-06-24T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or if the process runs out of file descriptors.\u003c/p\u003e"
            }
          ],
          "value": "An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or if the process runs out of file descriptors."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Missing Release of Resource after Effective Lifetime",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T12:23:05.694Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Denial of service via IXFR queries",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-40209",
    "datePublished": "2026-06-25T12:23:05.694Z",
    "dateReserved": "2026-04-10T07:11:39.060Z",
    "dateUpdated": "2026-06-25T13:56:22.793Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40210 (GCVE-0-2026-40210)

Vulnerability from cvelistv5 – Published: 2026-06-25 12:23 – Updated: 2026-06-25 13:49

Title

Out-of-bounds read in SetMacAddrAction

Summary

An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash.

Severity

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

Buffer Over-read
CWE-126 - Buffer Over-read

Assigner

References

1 reference

URL	Tags
https://www.dnsdist.org/security-advisories/power…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	DNSdist	Affected: 1.9.0 , < 1.9.15 (semver) Affected: 2.0.0 , < 2.0.7 (semver)

Date Public

2026-06-24 22:00

Credits

Qifan Zhang (Palo Alto Networks)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40210",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:49:25.851878Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-126",
                "description": "CWE-126 Buffer Over-read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:49:35.668Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "SetMacAddrAction"
          ],
          "packageName": "dnsdist",
          "product": "DNSdist",
          "programFiles": [
            "dnsdist-actions-factory.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "1.9.15",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.0.7",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Qifan Zhang (Palo Alto Networks)"
        }
      ],
      "datePublic": "2026-06-24T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash.\u003c/p\u003e"
            }
          ],
          "value": "An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer Over-read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T12:23:31.623Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Out-of-bounds read in SetMacAddrAction",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-40210",
    "datePublished": "2026-06-25T12:23:31.623Z",
    "dateReserved": "2026-04-10T07:11:39.060Z",
    "dateUpdated": "2026-06-25T13:49:35.668Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40211 (GCVE-0-2026-40211)

Vulnerability from cvelistv5 – Published: 2026-06-25 12:23 – Updated: 2026-06-25 13:45

Title

Denial of service via crafted DoH3 queries

Summary

An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

Allocation of Resources Without Limits or Throttling
CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

References

1 reference

URL	Tags
https://www.dnsdist.org/security-advisories/power…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	DNSdist	Affected: 1.9.0 , < 1.9.15 (semver) Affected: 2.0.0 , < 2.0.7 (semver)

Date Public

2026-06-24 22:00

Credits

Mehtab Zafar

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40211",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:44:56.582604Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:45:02.430Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "DNS over HTTP3"
          ],
          "packageName": "dnsdist",
          "product": "DNSdist",
          "programFiles": [
            "dnsdist-crypto.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "1.9.15",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.0.7",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Mehtab Zafar"
        }
      ],
      "datePublic": "2026-06-24T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.\u003c/p\u003e"
            }
          ],
          "value": "An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T12:23:55.585Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Denial of service via crafted DoH3 queries",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-40211",
    "datePublished": "2026-06-25T12:23:55.585Z",
    "dateReserved": "2026-04-10T07:11:39.060Z",
    "dateUpdated": "2026-06-25T13:45:02.430Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42004 (GCVE-0-2026-42004)

Vulnerability from cvelistv5 – Published: 2026-06-25 12:24 – Updated: 2026-06-25 13:44

Title

EDNS options smuggling

Summary

An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

Misinterpretation of Input
CWE-115 - Misinterpretation of Input

Assigner

References

1 reference

URL	Tags
https://www.dnsdist.org/security-advisories/power…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	DNSdist	Affected: 1.9.0 , < 1.9.15 (semver) Affected: 2.0.0 , < 2.0.7 (semver)

Date Public

2026-06-24 22:00

Credits

Vitaly Simonovich

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42004",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:44:02.980438Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-115",
                "description": "CWE-115 Misinterpretation of Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:44:07.962Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "EDNS processing"
          ],
          "packageName": "dnsdist",
          "product": "DNSdist",
          "programFiles": [
            "dnsdist-ecs.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "1.9.15",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.0.7",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Vitaly Simonovich"
        }
      ],
      "datePublic": "2026-06-24T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn attacker can send a crafted EDNS OPT record that will be ignored by DNSdist\u2019s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter.\u003c/p\u003e"
            }
          ],
          "value": "An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist\u2019s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Misinterpretation of Input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T12:24:20.140Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "EDNS options smuggling",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-42004",
    "datePublished": "2026-06-25T12:24:20.140Z",
    "dateReserved": "2026-04-23T11:15:21.198Z",
    "dateUpdated": "2026-06-25T13:44:07.962Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42005 (GCVE-0-2026-42005)

Vulnerability from cvelistv5 – Published: 2026-06-25 11:57 – Updated: 2026-06-25 13:04

Title

Insufficient input validation of internal web server

Summary

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

Allocation of Resources Without Limits or Throttling
CWE-400 - Uncontrolled Resource Consumption

Assigner

References

1 reference

URL	Tags
https://docs.powerdns.com/authoritative/security-…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	Authoritative	Affected: 4.9.0 , < 4.9.16 (semver) Affected: 5.0.0 , < 5.0.6 (semver) Affected: 5.1.0 , < 5.1.2 (semver)

Date Public

2026-06-10 22:00

Credits

ilya rozentsvaig

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42005",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:03:44.259390Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:04:12.854Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "YaHTTP"
          ],
          "packageName": "pdns",
          "product": "Authoritative",
          "programFiles": [
            "ext/yahttp/yahttp/reqresp.cpp"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "4.9.16",
              "status": "affected",
              "version": "4.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "5.0.6",
              "status": "affected",
              "version": "5.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "5.1.2",
              "status": "affected",
              "version": "5.1.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "ilya rozentsvaig"
        }
      ],
      "datePublic": "2026-06-10T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An attacker can send a web request that causes unlimited memory \nallocation in the internal web server, leading to a denial of service. \nThe internal web server is disabled by default."
            }
          ],
          "value": "An attacker can send a web request that causes unlimited memory \nallocation in the internal web server, leading to a denial of service. \nThe internal web server is disabled by default."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T11:57:16.346Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-07.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Insufficient input validation of internal web server",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-42005",
    "datePublished": "2026-06-25T11:57:16.346Z",
    "dateReserved": "2026-04-23T11:15:21.199Z",
    "dateUpdated": "2026-06-25T13:04:12.854Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

OPENSUSE-SU-2026:11411-1

CVE-2026-40011 (GCVE-0-2026-40011)

CVE-2026-40208 (GCVE-0-2026-40208)

CVE-2026-40209 (GCVE-0-2026-40209)

CVE-2026-40210 (GCVE-0-2026-40210)

CVE-2026-40211 (GCVE-0-2026-40211)

CVE-2026-42004 (GCVE-0-2026-42004)

CVE-2026-42005 (GCVE-0-2026-42005)

Tags

Sightings

Nomenclature