CVE-2026-4891
CVE-2026-4891
CVSS Score
5.3
EPSS Score
6.2%
EPSS Percentile
93th
A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
| Vendor | dnsmasq |
| Product | dnsmasq |
| Published | May 11, 2026 |
| Last Updated | Jul 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for dnsmasq dnsmasq
Be the first to know when new medium vulnerabilities affecting dnsmasq dnsmasq are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
dnsmasq / dnsmasq
0 < 2.92rel2
References
lists.thekelleys.org.uk: https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html kb.cert.org: https://www.kb.cert.org/vuls/id/471747 thekelleys.org.uk: https://thekelleys.org.uk/dnsmasq/CVE/ github.com: https://github.com/NixOS/nixpkgs/pull/519082 github.com: https://github.com/NixOS/nixpkgs/pull/519093 github.com: https://github.com/pi-hole/FTL/releases/tag/v6.6.2 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-4891 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2458517 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4891.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40762 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19158 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20589 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34508 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19373