Security Advisory

CVE-2026-42004

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-25 12:24:20

Last updated 2026-06-25 13:44:07

Assigner OX

CVSS score 3.7

State PUBLISHED

Description

An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter.

← Browse all CVEs View on cve.org ↗