Unrated severityNVD Advisory· Published Jun 26, 2026
Debian dnsdist: An attacker sending a large number of crafted DNS queries might be able to trigg…
CVE-2026-40011
Description
An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.