CVE-2026-101278: fallo de gravedad media en Trusted Domain Project OpenDMARC
Trusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validation
Publicada el · Actualizada el
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 5.3epss 0.1%
probabilidad de explotación
0.1%top 98% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_get_tld of the file libopendmarc/opendmarc_tld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Productos afectados
Trusted Domain Project · OpenDMARCPoCs públicas encontradas — 1
cve_referencexuyongzhe-vt.github.io/share/opendmarc-psl-wildcard-orgdomain.htmlno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Trusted Domain Project OpenDMARC
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-101281MEDIUMTrusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authenticationEPSS 0.4%CVE-2026-101280MEDIUMTrusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofingEPSS 0.4%CVE-2026-100890MEDIUMTrusted Domain Project OpenDMARC SPF Parser opendmarc_spf.c opendmarc_spf_ipv6_explode null pointer dereferenceEPSS 0.4%CVE-2026-101279MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c integer overflowEPSS 0.3%CVE-2026-101017MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional conditionEPSS 0.3%CVE-2026-101016MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional conditionEPSS 0.3%