VULNERABILITY INTELLIGENCE

CVE-2026-66374

CVSS score8.1 HIGH

EPSS probability0.62%

CISA KEVNot currently listed

Published2026-07-25

Last modified2026-10-24

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L

Description

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.