Vulnerabilities

TI-2026-30391 CVE-2026-42002 · GHSA-vx6m-m9qv-88q3

Concurrency and locking defects in GSS-TSIG

LOW 32

Concurrency and locking defects in GSS-TSIG

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00264 Published 2026-05-21 Fixed in 4.9.15, 5.0.5 CWE-364

TI-2026-30390 CVE-2026-42001 · GHSA-mxqj-8r4c-fp83

LOW 39

Insufficient Validation of Autoprimary SOA Queries

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00365 Published 2026-05-21 Fixed in 4.9.15, 5.0.5 CWE-400

TI-2026-30389 CVE-2026-42000 · GHSA-cmjg-f724-5qh3

LOW 37

Insufficient Validation of Names During AXFR

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00242 Published 2026-05-21 Fixed in 4.9.15, 5.0.5 CWE-77

TI-2026-30695 CVE-2026-42396 · GHSA-hm6h-mcgv-h2x8

LOW 29

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00353 Published 2026-05-21 Fixed in 4.9.15, 5.0.5 CWE-94