CVE Catalog

CVE-2026-45557

MediumCVSS 5.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.39%

31th percentile - higher than 31% of all known CVEs

Summary

Technitium DNS Server before version 15.0 aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker controlling a domain can cause excessive network traffic.

Risk Assessment

An attacker can exploit this to perform a DoS attack by generating excessive network traffic, potentially overloading the server and network.

Recommendation

Upgrade Technitium DNS Server to version 15.0 or later.

Original NVD description (English source)

Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic. Fixed in 15.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS