Security Advisory

CVE-2026-33599

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-22 13:46:05

Last updated 2026-04-22 14:50:22

Assigner OX

State PUBLISHED

Description

A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or auto_upgrade (YAML) settings. DDR upgrade is not enabled by default.

← Browse all CVEs View on cve.org ↗