CVE-2026-101280: falha de média gravidade em Trusted Domain Project OpenDMARC
Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing
Publicada em
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 6.9epss 0.4%
probabilidade de exploração
0.4%top 68% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarc_policy_query_dmarc of the component Multi-Record Set Handler. The manipulation results in authentication bypass by spoofing. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
Trusted Domain Project · OpenDMARCPoCs públicas encontradas — 1
cve_referencexuyongzhe-vt.github.io/share/opendmarc-multi-record-downgrade.htmlnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Trusted Domain Project OpenDMARC
No mesmo produto, das mais perigosas para as menos.
CVE-2026-101281MEDIUMTrusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authenticationEPSS 0.4%CVE-2026-100890MEDIUMTrusted Domain Project OpenDMARC SPF Parser opendmarc_spf.c opendmarc_spf_ipv6_explode null pointer dereferenceEPSS 0.4%CVE-2026-101279MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c integer overflowEPSS 0.3%CVE-2026-101017MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional conditionEPSS 0.3%CVE-2026-101016MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional conditionEPSS 0.3%CVE-2026-101014MEDIUMTrusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-oneEPSS 0.3%