CVE-2026-66374highCWE-1284

CVE-2026-66374: high-severity vulnerability in nic Knot Resolver

Published · Updated

Follow this CVE+ Monitor Knot Resolver+ Monitor knot-resolver

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 8.1epss 0.6%
from disclosure to weaponsame day
Published on NVDJul 25
1st PoCJul 23
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L
Affected products
nic · Knot Resolver
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.