Login Request a demo
DS
Product
DNS Server
by Technitium · last CVE May 19, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 2High 7Medium 2Low 0
Severity
All severities11Critical2High7Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add DNS Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-30258
9.8
1%
Nov 21
An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution
Affected: through 8.0.2
CVE-2022-30257
9.8
1%
Nov 21
An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution
Affected: through 8.0.2
CVE-2023-49203
7.5
1%
Sep 18
Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-rate DNS queries such…
Affected: 11.5.3
CVE-2023-28456
7.5
1%
Sep 18
An issue was discovered in Technitium through 11.0.2
Affected: through 11.0.2
CVE-2023-28457
7.5
0%
Sep 18
An issue was discovered in Technitium through 11.0.3
Affected: through 11.0.3
CVE-2023-28451
7.5
1%
Sep 18
An issue was discovered in Technitium 11.0.2
Affected: 11.0.2
CVE-2023-28455
7.5
1%
Sep 18
An issue was discovered in Technitium through 11.0.2
Affected: through 11.0.2
CVE-2024-33655
7.5
2%
Jun 6
The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumulated for seconds,…
Affected: through 1.19.3
CVE-2022-48256
7.5
1%
Jan 13
Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records
Affected: before 10.0
CVE-2026-45557
5.8
0%
May 19
Technitium DNS Server excessive DNSSEC requests
Affected: before 15.0
CVE-2021-43105
4.3
1%
Mar 28
A vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that allows specific malicious users to inject `NS` records of any domain (even TLDs)…
Affected: through 7.0
Showing 11