CVE-2026-45557
Awaiting Analysis Awaiting Analysis - Queue
DNSSEC Misconfiguration Leading to Excessive Traffic in Technitium DNS Server

Publication date: 2026-05-19

Last updated on: 2026-05-19

Assigner: Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government

Description
Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic. Fixed in 15.0.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-19
Last Modified
2026-05-19
Generated
2026-06-10
AI Q&A
2026-05-19
EPSS Evaluated
2026-06-08
NVD
CVE-2026-45557
EUVD
EUVD-2026-30938
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
technitium dns_server 15.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
CWE-405 The product does not properly control situations in which an adversary can cause the product to consume or produce excessive resources without requiring the adversary to invest equivalent work or otherwise prove authorization, i.e., the adversary's influence is "asymmetric."
CWE-406 The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in Technitium DNS Server, where the server aggressively attempts to fetch missing RRSIG records or mismatched DNSKEY records.

An attacker who controls a domain can exploit this behavior to cause the vulnerable system to generate excessive network traffic.

This issue was fixed in version 15.0 of the software.

Impact Analysis

The vulnerability can lead to a denial of service condition by causing the affected DNS server to generate excessive network traffic.

This excessive traffic can degrade the performance of the DNS server and potentially impact network resources.

Mitigation Strategies

The vulnerability is fixed in Technitium DNS Server version 15.0.

To mitigate this vulnerability, you should upgrade your Technitium DNS Server to version 15.0 or later.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-45557. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart