CVE-2026-18664

NSD (a DNS server maintained by NLnet Labs) contains a flaw in its ACL range comparison logic. On little-endian systems , IP addresses are compared using the host's native endianness instead of network byte order (big-endian) , which is the correct format for the stored values. This affects both ...