CVE-2026-39155
Last modified
CVE-2026-39155 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name can be computed incorrectly. This can create an overly broad authenticated denial interval, allowing downstream validating resolvers using aggressive negative caching to synthesize negative answers for legitimate names and causing resolver-side denial of service.. EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name can be computed incorrectly. This can create an overly broad authenticated denial interval, allowing downstream validating resolvers using aggressive negative caching to synthesize negative answers for legitimate names and causing resolver-side denial of service.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| — | — | n/a |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-39155?
How severe is CVE-2026-39155?
How do I fix CVE-2026-39155?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-39112Cross Site Scripting vulnerability in Apartment Visitors Man…5.4
- CVE-2026-39118An issue in Iru, Inc Kandji Agent before v.4.7.5(5374) allow…8.4
- CVE-2026-3912Injection vulnerabilities due to validation/sanitisation of …8.7
- CVE-2026-3913Heap buffer overflow in WebML in Google Chrome prior to 146.…8.8
- CVE-2026-3914Integer overflow in WebML in Google Chrome prior to 146.0.76…8.8
- CVE-2026-3915Heap buffer overflow in WebML in Google Chrome prior to 146.…8.8
- CVE-2026-3916Out of bounds read in Web Speech in Google Chrome prior to 1…9.6
- CVE-2026-39169SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMS_co…7.5
- CVE-2026-3917Use after free in Agents in Google Chrome prior to 146.0.768…8.8
- CVE-2026-39170SemCms 5.0 is vulnerable to Cross Site Request Forgery (CSRF…6.3
- CVE-2026-39178A SQL injection vulnerability in SOGo before 5.12.7 allows a…6.3
- CVE-2026-39179A SQL injection vulnerability in SOGo before 5.12.7 allows a…6.3
Are you affected by CVE-2026-39155?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST