PT-2026-41937 · Technitium · Technitium Dns Server

Published 2026-05-19 · Updated 2026-05-19 · CVE-2026-45557

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Technitium DNS Server versions prior to 15.0

Description The software aggressively attempts to fetch missing RRSIG records or mismatched DNSKEY records. An attacker controlling a domain can exploit this behavior to force a vulnerable system to generate excessive network traffic.

Recommendations Update to version 15.0.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

CWE-405

CWE-406

Related Identifiers

CVE-2026-45557

Affected Products

Technitium Dns Server

References · 5

• https://github.com/TechnitiumSoftware/DnsServer/blo/master/CHANGELOG.md#version-150 · Patch
• https://cve.org/CVERecord?id=CVE-2026-45557 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45557 · Security Note
• https://twitter.com/CVEnew/status/2056870222556967300 · Twitter Post
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-138-02.json · Note