CVE-2026-50426
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Relative path traversal vulnerability in DNS Server allows an authorized attacker to execute code over an adjacent network.
Risk Assessment
An attacker could take control of the DNS server and execute arbitrary code, compromising network service integrity and availability.
Recommendation
Apply the latest security updates provided by the DNS server vendor and restrict trusted adjacent networks.
Other vulnerabilities in DNS Server
See all- CVE-2016-3227Critical
A use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests.
- CVE-2026-49169High
Use-After-Free vulnerability in DNS Server allows an authorized attacker to execute code remotely over the network. The issue stems from improper memory management when processing specially crafted DNS queries.
- CVE-2026-42000Medium
Insufficient validation of names during AXFR (DNS zone transfer) may allow an attacker to inject malicious or malformed data.
Original NVD description (English source)
Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network.