CVE-2026-81384
A NVD · · CVE-2026-81384
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key metrics
- CVSS
- 8.1
- EPSS
- 0%
Key insight
The report provides no indication of active exploitation or attacker TTPs and does not go beyond bare CVE patch information.
Description
CVE-2026-81384 is a heap-based buffer overflow in the DNS Server service. An unauthenticated attacker can use it to execute code over the network. The NVD entry does not specify affected versions, exploitation evidence, or KEV status. There is no indication of active attacks or published exploits.
Risk score
- cvss base
- 81.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 81.00
- industry weight
- 1.21
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 0.00
- vendor mismatch penalty
- 0.00
Path: operational
MITRE ATT&CK mapping
1 TTPProcedure details
| Technique | Tactic | Procedure | Conf. | Source |
|---|---|---|---|---|
| T1190 Exploit Public-Facing Application | Initial Access | An attacker sends a maliciously crafted DNS request to the vulnerable DNS server, triggering a heap-based buffer overflow and achieving remote code execution over the network. | high | llm |