CVE-2026-66374 | CyberRota

CyberRota Analysis

AI-Generated

Knot Resolver versions prior to 6.4.1 are vulnerable to a heap-based buffer overflow in the DNS-over-QUIC (DoQ) receive path, which can be exploited for remote code execution. This vulnerability poses a significant risk to systems utilizing Knot Resolver, particularly those exposed to untrusted networks. Organizations using affected versions should prioritize patching to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals

remote code execution code execution

GitHub PoC Links

github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-66374

Severity

HIGH

CVSS

8.1

EPSS

0.39%

Original NVD Description

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.