CVE-2026-58218
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.3
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- EPSS probability
- 0.62%
- CWE
- CWE-410
- Published
- 2026-07-30
- Last modified
- 2026-07-30
Weakness type
Related vulnerabilities
- CVE-2026-34019 — BIG-IP BFD vulnerability
- CVE-2025-2134 — IBM Jazz Reporting Service Denial of Service
- CVE-2025-12986 — Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices
- CVE-2025-41653 — Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches
- CVE-2025-20103 — Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow...
- CVE-2025-27479 — Kerberos Key Distribution Proxy Service Denial of Service Vulnerability
- CVE-2025-27694 — Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool...
- CVE-2025-0453 — Denial of Service through Batched Queries in GraphQL in mlflow/mlflow