MEDIUMCVSS v3.1 4.3Vulnerability
CVE-2026-93010
A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does not check who sent the query. A host on the local network can request DHCP lease records and learn assigned addresses, MAC addresses, hostnames, and related lease metadata. The feature is off unless an administrator turns it on.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-10-29T15:51:37.835109+00:00
- Cvss severity
- MEDIUM
- Cvss score
- 4.3
- Retrieved at
- 2026-10-29T15:52:27+00:00
- Score
- 4.3
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-93010
- Cvss vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- First seen by Signal
- 2026-10-29T15:52:27+00:00
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Published at
- 2026-10-29T14:18:00.530
- Last modified
- 2026-10-29T14:18:00.640
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph