Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 30

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00299 Published 2026-06-25 Fixed in 5.4.3 CWE-20
TI-2026-30690 CVE-2026-42390 · GHSA-3r7g-67q5-53gf

ZONEMD validation can be bypassed

Priority LOW 30

An invalid zone might pass ZONEMD validation while it should not.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00299 Published 2026-06-25 Fixed in 5.4.3 CWE-20