CVE-2026-39155

Knot DNS versions prior to 3.4.10 and 3.5.x before 3.5.4 are affected by a vulnerability in the mod-onlinesign component. The root cause is the incorrect computation of the next NSEC (Next Secure) owner name, which can create an overly broad authenticated denial interval. This allows downstream v...