MEDIUM 4.3 NVD

CVE-2026-93010

A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does not check who sent the query. A host on t

A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does not check who sent the query. A host on the local network can request DHCP lease records and learn assigned addresses, MAC addresses, hostnames, and related lease metadata. The feature is off unless an administrator turns it on.

References

https://access.redhat.com/security/cve/CVE-2026-93010
https://bugzilla.redhat.com/show_bug.cgi?id=2536081

Published: 2026-10-29 · Source: NVD · Feed updated: 2026-10-29

This medium severity vulnerability with a CVSS score of 4.3 was published on 2026-10-29 via NVD.

vulnfeed aggregates 16756 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.