CVE-2026-45557CWE-405CWE-406CWE-770

Technitium DNS Server excessive DNSSEC requests

Medium · published May 19, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
42.3
In the wild
Unconfirmed
What it is

Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic. Fixed in 15.0.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L
EPSS
0.00507 · 42.3th percentile
Weaknesses
CWE-405 · Asymmetric Resource Consumption (Amplification); CWE-406 · Insufficient Control of Network Message Volume (Network Amplification); CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-05-19T13:47Z
EPSS history
Timeline
  • 19 MAY 13:47Z
    Technitium DNS Server excessive DNSSEC requests
    cvelistv5