CVE-2026-93006

A flaw in dnsmasq allows the TFTP server to serve incorrect file contents because a recently used transfer cache is not invalidated upon completion. An attacker on the local network who can request a TFTP file can cause subsequent clients to receive previously cached data instead of the intended ...

CVE-2026-93006 Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content

A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client to receive previously cached data instead of the...