CVE-2026-10846— Insufficient verification that responses belong to a query
Quick assessment
Affected
NLnet Labs ldns
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NLnet Labs ldns是荷兰Nlnet基金会的一个便于DNS工具编程的DNS库。 NLnet Labs ldns 1.2.0版本至1.9.0版本存在访问控制错误漏洞，该漏洞源于作为UDP解析器使用时未匹配查询目标地址和端口与响应源地址和端口，可能导致应用程序易受路径外投毒攻击。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| NLnet Labs | ldns | 1.2.0< 1.9.1 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-10846
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insufficient verification that responses belong to a query
Source: CVE Program / CVE List V5
Vulnerability Description
NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of the response. This makes applications, that use ldns for (stub) resolver functionality over UDP, vulnerable for off-path poisoning attacks. The drill tool, which is shipped with ldns, suffers from this vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
源验证错误
Source: CVE Program / CVE List V5
Vulnerability Title
NLnet Labs ldns 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NLnet Labs ldns是荷兰Nlnet基金会的一个便于DNS工具编程的DNS库。 NLnet Labs ldns 1.2.0版本至1.9.0版本存在访问控制错误漏洞，该漏洞源于作为UDP解析器使用时未匹配查询目标地址和端口与响应源地址和端口，可能导致应用程序易受路径外投毒攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| NLnet Labs | ldns | 1.2.0 ~ 1.9.1 | - |
|
II. Public POCs for CVE-2026-10846
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-10846
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-10846 (1)
-
🔗 https://www.nlnetlabs.nl/downloads/ldns/CVE-2026-10846.txt vendor-advisory
IV. Related Vulnerabilities
Same vendor: NLnet Labs
-
CVE-2026-85501
Retrap: Novel Vulnerabilities to launch Algorithmic Complexi -
CVE-2026-82720
Use-after-free in DoH stream cleanup code path -
CVE-2026-82717
CNAME synthesis could lead to heap corruption -
CVE-2026-81642
Heap buffer overflow and possible Remote Code Execution when -
CVE-2026-81634
Possible heap buffer overflow during DNSSEC canonicalization
Same weakness: CWE-346
-
CVE-2026-108269
ra-tls-clients: RA-TLS challenge verifier accepted quotes no -
CVE-2026-108268
enclave-os-virtual: RA-TLS challenge certificates were not b -
CVE-2026-108267
Privasys Go fork: RA-TLS challenge mode did not bind attesta -
CVE-2026-108266
Privasys rustls fork: RA-TLS challenge mode did not bind att -
CVE-2026-108265
enclave-os-mini: RA-TLS challenge certificates were not boun
V. Comments for CVE-2026-10846
No comments yet