PT-2026-35197 · Technitium · Technitium Dns Server

CVE-2026-42255 · Published 2026-04-26 · Updated 2026-04-26

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Technitium DNS Server versions prior to 15.0

Description Technitium DNS Server allows DNS traffic amplification via cyclic name server delegation. DNS traffic amplification is a technique where a small request results in a much larger response, which can be used to overwhelm a target system with traffic.

Recommendations Update to version 15.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-684

Related Identifiers

CVE-2026-42255

Affected Products

Technitium Dns Server

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42255.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-42255 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-42255 · Security Note
• https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#technitium-dns-server-change-log · Note
• https://twitter.com/VulmonFeeds/status/2048266561660629357 · Twitter Post
• https://twitter.com/CVEarity/status/2048317044165382486 · Twitter Post
• https://twitter.com/CVEnew/status/2048481059054985678 · Twitter Post