CVE-2026-66374

HIGH SEVERITY

CVSS Score & Metrics

Base Score

8.1 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L                                    

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.

Published Date

July 25, 2026

Last Modified

July 25, 2026

CWE ID

CWE-1284

Source

NVD

Vendor

nic

Product

Knot Resolver