CVE-2026-66374 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
mitre	CNA	8.1 HIGH	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 41%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
nic	knot_resolver	𝑥 < 6.4.1	CNA

Debian Releases

Debian Product

Codename

knot-resolver

bookworm	5.6.0-1+deb12u1 fixed
bookworm (security)	5.6.0-1+deb12u1 fixed
bullseye	not-affected
forky	6.4.2-1 fixed
sid	6.4.2-1 fixed
trixie	5.7.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

knot-resolver

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
resolute	needs-triage
xenial	needs-triage

Common Weakness Enumeration

CWE-1284 - Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References

https://github.com/venglin/knot-doq

https://openwall.com/lists/oss-security/2026/07/23/6

https://github.com/venglin/knot-doq