CVE catalog

CVE-2026-42255

Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation.

[CVE catalog]

Severity
High · CVSS 7.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.21% · Oct 25, 2026

Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
CpednsserverNot reported15.0fixed
CpednsserverNot reported15.0fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
CpednsservercpeNot reported15.0Not reportedNot reportedNot reported
CpednsservercpeNot reported15.0Not reportedNVD-CVE-2026-42255Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References