CVE-2025-50334

7.5 HIGH
Published: January 08, 2026 Modified: January 12, 2026
View on NVD

Description

An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via the rate-limiting component

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://technitium.com
Source: cve@mitre.org
Product
https://github.com/FPokerFace/Security-Advisory/tree/main/CVE-2025-50334
Source: cve@mitre.org
Exploit Third Party Advisory
https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md
Source: cve@mitre.org
Release Notes
https://github.com/TechnitiumSoftware/DnsServer/blob/v13.3/DnsServerCore/Dns/DnsServer.cs
Source: cve@mitre.org
Product
https://github.com/TechnitiumSoftware/DnsServer/commit/7229b217238213cc6275eea68a7e17d73df1603e
Source: cve@mitre.org
Patch

5 reference(s) from NVD

Quick Stats

CVSS v3 Score
7.5 / 10.0
EPSS (Exploit Probability)
0.1%
33th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-770

Affected Vendors

technitium

Related CVEs

CVE-2026-4593 6.3
CVE-2026-33507 8.8
CVE-2026-33502 9.3
CVE-2026-33501 5.3
CVE-2026-33500 5.4