What is CVE-2026-10846?

CVE-2026-10846 is a high-severity vulnerability in Nlnet Labs Ldns, classified under Origin Validation Error. CVSS score: 7.5/10. Published 2026-06-10.

How severe is CVE-2026-10846?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Nlnet Labs Ldns

CVE-2026-10846

NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID…

EPSS: 0.001 (4.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Nlnet Labs Ldns — versions 1.2.0
Nlnetlabs Ldns

Weakness classification (CWE)

CWE-346 — Origin Validation Error

References

sep@nlnetlabs.nl (vendor-advisory, Vendor Advisory)
af854a3a-2127-422b-91ae-364da2661108 (Patch, Mailing List, Third Party Advisory)

Frequently asked questions

What is CVE-2026-10846?: CVE-2026-10846 is a high-severity vulnerability in Nlnet Labs Ldns, classified under Origin Validation Error. CVSS score: 7.5/10. Published 2026-06-10.
How severe is CVE-2026-10846?: High severity. CVSS v3 base score is 7.5 out of 10.