CVE-2026-42390

—

CVSS 3.1

5.3 medium

EPSS

<1%p11

Published

Jun 25, 2026 (Jun 25, 2026)

Modified

Jun 25, 2026

Description

An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation.

Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.