CVE Watch30 jul 2026

CVE-2026-58218

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before be

CVSS

5.3

Medio

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 30 jul 2026 · Última mod.: 30 jul 2026 · CWE-410

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.

Referencias oficiales

access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-58218
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=2502728
bugzilla.samba.orghttps://bugzilla.samba.org/show_bug.cgi?id=16115
www.samba.orghttps://www.samba.org/samba/security/CVE-2026-58218.html

CVEs relacionados

Sin CVEs relacionados por CWE o producto.