CVE-2026-58218
Medium · 5.3CVSS
5.3
EPSS
0.8%
Published
Jul 30, 2026
CISA due date
—
The record
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-34019 When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing… CWE-410
- CVE-2025-2134 IBM Jazz Reporting Service could allow an authenticated user on the network to affect the… CWE-410
- CVE-2025-12986 When a WF200/WGM160P device is configured to operate as an Access Point, it may be… CWE-410