CVE-2026-42000

15th percentile - higher than 15% of all known CVEs

Insufficient validation of names during AXFR (DNS zone transfer) may allow an attacker to inject malicious or malformed data.

An attacker could exploit this to perform unauthorized zone transfers, exposing sensitive domain information.

Update DNS software to a version that properly validates names during AXFR. Restrict zone transfer access to trusted secondary servers only.