Skip to content
OpenAdvisories
Medium VA-26-138-02 1 CVE

Technitium DNS Amplification

Published May 19, 2026 · Updated May 19, 2026

Vendor: Technitium Product: DNS Server

Summary

Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic.

Vulnerabilities 1

  • Medium 5.8
    CVE-2026-45557

    Technitium DNS Server excessive DNSSEC requests

    Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic. Fixed in 15.0.

    Technitium DNS Server

Revision history

  1. #1.0.0

    Initial publication