TLDRVuln - Cybersecurity Vulnerabilities Made Simple

CVE-2026-4893

Medium · published May 11, 2026

CVSS v3.1

5.3

EPSS

Percentile

46.8

In the wild

Unconfirmed

What it is

An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00578 · 46.8th percentile
Published: 2026-05-11T16:48Z

EPSS history

Timeline

11 MAY 16:48Z
CVE-2026-4893
cvelistv5