CVE Catalog

CVE-2026-42396

MediumCVSS 4.9
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

28th percentile - higher than 28% of all known CVEs

Summary

Insufficient validation of member zone data may cause catalog zone transfer to fail.

Risk Assessment

The risk involves potential disruption of DNS replication, which could lead to network service unavailability.

Recommendation

Update the DNS software to the latest version containing fixes for zone data validation.

Original NVD description (English source)

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

Vulnerability data from NVD (NIST) · CISA KEV · EPSS