CVE-2026-0396

A flaw was found in dnsdist. A remote attacker could exploit this vulnerability by sending specially crafted DNS queries to a dnsdist instance where domain-based dynamic rules have been enabled. This could allow the attacker to inject malicious HTML content into the internal web dashboard,...

CVE-2026-0396

CVE-2026-0396 : The vulnerability affects a DNSdist instance with domain-based dynamic rules enabled (DynBlockRulesGroup:setSuffixMatchRule or setSuffixMatchRuleFFI). An attacker can inject HTML content into the internal web dashboard by sending crafted DNS queries. The reports do not specify aff...