Known Vulnerabilities for Dnsmasq by Thekelleys

Listed below are 10 of the newest known vulnerabilities associated with "Dnsmasq" by "Thekelleys".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-116237 json A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of the component Dnsmasq. Performing ... Not Provided 2026-10-26 2026-11-02
CVE-2026-116233 json A security vulnerability has been detected in Oray Pugongying X5 Pro 7.6.1. This impacts an unknown function of the component... Not Provided 2026-10-26 2026-10-31
CVE-2026-93011 json A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a few byt... Not Provided 2026-10-29 2026-11-06
CVE-2026-93010 json A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does not ch... Not Provided 2026-10-29 2026-11-06
CVE-2026-93009 json A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a crafted FQDN option becaus... Not Provided 2026-10-29 2026-11-06
CVE-2026-93008 json A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME target wi... Not Provided 2026-10-29 2026-11-05
CVE-2026-93007 json A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does not set a receive timeou... Not Provided 2026-10-29 2026-11-06
CVE-2026-93006 json A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not ... Not Provided 2026-10-29 2026-11-06
CVE-2026-61477 json An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline chara... Not Provided 2026-08-07 2026-11-06
CVE-2026-58395 json OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached through Api... Not Provided 2026-10-15 2026-10-15

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationThekelleysDnsmasq2.9
ApplicationThekelleysDnsmasq2.83
ApplicationThekelleysDnsmasq2.82
ApplicationThekelleysDnsmasq2.81
ApplicationThekelleysDnsmasq2.80
ApplicationThekelleysDnsmasq2.8
ApplicationThekelleysDnsmasq2.79
ApplicationThekelleysDnsmasq2.78
ApplicationThekelleysDnsmasq2.77
ApplicationThekelleysDnsmasq2.76
ApplicationThekelleysDnsmasq2.75
ApplicationThekelleysDnsmasq2.74
ApplicationThekelleysDnsmasq2.73
ApplicationThekelleysDnsmasq2.72
ApplicationThekelleysDnsmasq2.71
ApplicationThekelleysDnsmasq2.70
ApplicationThekelleysDnsmasq2.7
ApplicationThekelleysDnsmasq2.69
ApplicationThekelleysDnsmasq2.68
ApplicationThekelleysDnsmasq2.67

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report