OpenDMARC vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

OP

Product

OpenDMARC

by Trusted Domain Project · last CVE Sep 29, 2026

10

CVEs

0

On KEV

7.3

Max CVSS

4

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 0High 5Medium 5Low 0

Severity

All severities10 Critical0 High5 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add OpenDMARC to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-101281	7.3	0%	Sep 29	Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication Affected: 1.4.0; 1.4.1; 1.4.2
CVE-2026-101280	7.3	0%	Sep 29	Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing Affected: 1.4.0; 1.4.1; 1.4.2
CVE-2026-101015	7.3	0%	Sep 28	Trusted Domain Project OpenDMARC policy.c improper validation of unsafe equivalence in input Affected: 1.4.0; 1.4.1; 1.4.2
CVE-2026-101014	7.3	0%	Sep 28	Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one Affected: 1.4.0; 1.4.1; 1.4.2
CVE-2026-100891	7.3	0%	Sep 28	Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error Affected: 1.4.0; 1.4.1; 1.4.2