CVE-2026-4890

CVSS 3.1: 7.5 high
EPSS: 9%p95
Published: May 11, 2026 · May 11, 2026
Modified: Aug 25, 2026

Analyze CVE-2026-4890 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.

Weakness: CWE-835

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (8.8%)

In the news

3 stories

Six new dnsmasq vulnerabilities open the door to DNS cache poisoning, local root

Six dnsmasq flaws enable DNS cache poisoning, DoS, memory leaks, and local root code execution; fixes ship in version 2.92rel2.

Help Net SecurityAug 24, 04:21 UTC · Aug 24, 2026VulnerabilityCVE-2026-2291 CVE-2026-4890 CVE-2026-4891+31 · 1 read

OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws

The Hacker NewsJun 23, 05:25 UTC · Jun 23, 2026VulnerabilityCVE-2026-47729 CVE-2026-4890 CVE-2026-4891+31

ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability

ZDI disclosed an unauthenticated infinite-loop denial-of-service flaw (CVE-2026-4890) in dnsmasq DNSSEC NSEC/NSEC3 bitmap processing.

ZDI Published AdvisoriesAug 13, 05:00 UTC · Aug 13, 2026VulnerabilityCVE-2026-48901 · 1 read