Skip to content
OpenAdvisories
Medium · 5.8 CVE-2026-45557 EUVD-2026-30938GHSA-vpfg-gc96-vg45

Technitium DNS Server excessive DNSSEC requests

Published May 19, 2026 · Updated May 19, 2026 · Assigned by cisa-cg

Description

Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic. Fixed in 15.0.

Affected products

VendorProductAffectedFixed
Technitium DNS Server < 15.0 15.0

Advisories 1

References