ZeroDay Findings
Sign inSign up

Findings

CVE-2026-4890

ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability

Published Aug 13, 2026

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of dnsmasq. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-4890.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 13, 2026 · Catalog

    Detected

    This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of dnsmasq. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-4890.

Sources

  • CVE.orgCVE-2026-4890

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-4890

    30-day exploitation probability 1.1%

    first.org
  • Zero Day InitiativeZDI-26-584

    This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of dnsmasq. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-4890.

    zerodayinitiative.com
CVE-2026-4890 · ZeroDay Findings