CVE-2026-4893
MEDIUM 5.3EPSS 1.8%
An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.
- CVSS v3.1
- 5.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - EPSS
- 1.78% chance of exploitation in the next 30 days, 77th percentile
- Published
- 2026-05-11
- Updated
- 2026-05-20
Proof-of-concept exploits (1)
- lottiedeyan/CVE20264893poc0★ · 2026-05-27