Login Request a demo
DE
Product
Designate
by OpenStack · last CVE Aug 12, 2026
4
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 0Medium 3Low 0
Severity
All severities4Critical1High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Designate to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-71193
9.6
1%
Aug 12
In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only
Affected: 1.0.0 before 20.0.2; 21.0.0 before 21.0.1; 22.0.0 before 22.0.1
CVE-2026-71194
6.8
1%
Aug 12
In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests
Affected: 1.0.0 before 20.0.2; 21.0.0 before 21.0.1; 22.0.0 before 22.0.2
CVE-2015-5694
6.5
2%
Nov 22
Designate does not enforce the DNS protocol limit concerning record set sizes
Affected: 1.0.0; 1.0.0.0; 2015.1.0
CVE-2015-5695
6.5
2%
Aug 31
Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file…
Affected: 1.0.0.0b1; 1.0.0a0; 2015.1.0
Showing 4