Is CVE-2026-13002 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-13002?

CVE-2026-13002 has a CVSS v3 severity of MEDIUM (4.4).

Back

CVE-2026-13002

Description

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.