CVE-2026-93008 Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations

A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME target without checking that those records belong to the responding server's authorized zone. In split-DNS deployments that send some domains to a specific upstream, an attacker who...

CVE-2026-93008

A flaw in dnsmasq allows for out-of-bailiwick cache injection during a CNAME chase in split-DNS configurations. The resolver may cache records for a CNAME target without verifying if they belong to the responding server's authorized zone. If an attacker controls an upstream server used in a split...