CVE-2026-4890
CVE-2026-4890
CVSS Score
7.5
EPSS Score
7.2%
EPSS Percentile
94th
A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
| Vendor | dnsmasq |
| Product | dnsmasq |
| Published | May 11, 2026 |
| Last Updated | Jul 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for dnsmasq dnsmasq
Be the first to know when new high vulnerabilities affecting dnsmasq dnsmasq are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
dnsmasq / dnsmasq
0 < 2.92rel2
References
kb.cert.org: https://www.kb.cert.org/vuls/id/471747 lists.thekelleys.org.uk: https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html thekelleys.org.uk: https://thekelleys.org.uk/dnsmasq/CVE/ github.com: https://github.com/NixOS/nixpkgs/pull/519093 github.com: https://github.com/NixOS/nixpkgs/pull/519082 github.com: https://github.com/pi-hole/FTL/releases/tag/v6.6.2 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-4890 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2458516 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4890.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40762 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19158 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20589 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34508 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19373