CyberzSOC

Publication detail
← Back to advisories & guidance

VA-26-138-02: Technitium DNS Amplification ↗ source

May 18, 2026 CISA Vulnerability Advisory
Source: https://github.com/cisagov/CSAF/blob/develop/csaf_files/IT/white/2026/va-26-138-02.json

Summary

Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic. CVE-2026-45557: Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic. Fixed in 15.0.

Advisory Details CISA IT CSAF feed

Advisory ID
VA-26-138-02
Status
Final · version 1.0.0
Initial release
2026-05-19
Last revised
2026-05-19
Vendor
Technitium
Critical infrastructure sectors
Information Technology
Deployed
Worldwide
Vendor headquarters
United States

Fixed in version 15.0.

Affected products (1)
  • DNS Server — <15.0, 15.0

From CISA's machine-readable CSAF 2.0 advisory (JSON).

Vulnerabilities as Stated by the Advisory

CVEWeaknessCVSS v3Details
CVE-2026-45557 CWE-405 Asymmetric Resource Consumption (Amplification) 5.8 Medium Technitium DNS Server excessive DNSSEC requests
Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network traffic. Fixed in 15.0. CISA SSVC — Exploitation: None · Automatable: No · Impact: Partial

Vendor fix: Fixed in 15.0. ↗

Affected, fixed & timeline

Affected:

  • DNS Server <15.0

Fixed in:

  • DNS Server 15.0

Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVECVSSAffected
CVE-2026-45557 5.8 Medium Technitium DNS Server Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a …

Named by the advisory itself. Each CVE links to its tracked detail page.

Vendors Named in This Publication

No KEV-catalogued vendors are named in this publication.