CVE-2026-93006
6.8 MEDIUMPublished 2026-10-29 · Updated 2026-10-30
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client to receive previously cached data instead of the requested file. In PXE network-boot environments this can substitute attacker-chosen boot content for a victim machine.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-672
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-106310
- MEDIUMCVE-2026-106320
- LOWCVE-2026-106339
- MEDIUMCVE-2026-106345
- UNSCOREDCVE-2026-115402
- UNSCOREDCVE-2026-53918PoC
- MEDIUMCVE-2026-57446PoC
- MEDIUMCVE-2026-95366PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.