CVE-2026-4890

CVSS

—

EPSS

0.011 (63.3th percentile)

CISA KEV

Not listed

Exploitation

No report

Public exploits

None seen

State

Unknown

Coverage

• Zero Day Initiative — published13 Aug, 05:00

  ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability

  This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of dnsmasq. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-4890.

  ↗zerodayinitiative.com/advisories/ZDI-26-584(opens the publisher's site in a new tab)

What we observed