CVE-2026-66374highCWE-1284

CVE-2026-66374

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 8.1epss 0.4%

from disclosure to weapon0 days

Published on NVDJul 25

1st PoCJul 23

exploitation probability

0.4%top 68% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L

Affected products

public PoCs found — 1

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References