CVE-2026-93008

A flaw in dnsmasq allows for out-of-bailiwick cache injection during a CNAME chase in split-DNS configurations. The resolver may cache records for a CNAME target without verifying if they belong to the responding server's authorized zone. If an attacker controls an upstream server used in a split...