CVE-2026-101280: fallo de gravedad media en Trusted Domain Project OpenDMARC
Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing
Publicada el
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 6.9epss 0.4%
probabilidad de explotación
0.4%top 68% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarc_policy_query_dmarc of the component Multi-Record Set Handler. The manipulation results in authentication bypass by spoofing. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
Trusted Domain Project · OpenDMARCPoCs públicas encontradas — 1
cve_referencexuyongzhe-vt.github.io/share/opendmarc-multi-record-downgrade.htmlno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Trusted Domain Project OpenDMARC
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-101281MEDIUMTrusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authenticationEPSS 0.4%CVE-2026-100890MEDIUMTrusted Domain Project OpenDMARC SPF Parser opendmarc_spf.c opendmarc_spf_ipv6_explode null pointer dereferenceEPSS 0.4%CVE-2026-101279MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c integer overflowEPSS 0.3%CVE-2026-101017MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional conditionEPSS 0.3%CVE-2026-101016MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional conditionEPSS 0.3%CVE-2026-101014MEDIUMTrusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-oneEPSS 0.3%