By vendor

Thekelleys vulnerabilities

Known CVEs affecting Thekelleys products, prioritized by severity, with SEC.co remediation and detection guidance.

2 published vulnerabilities

• CVE-2026-12725MEDIUM 5.9

  A flaw in dnsmasq allows a remote attacker to crash the DNS service by sending specially crafted DNS responses. The vulnerability only triggers when two features are active together: DNSSEC validation (which verifies DNS record authenticity) and query logging (which records DNS requests and responses). When these conditions are met, responses containing unsupported algorithm types cause dnsmasq to overflow an internal memory buffer, terminating the process. This results in denial of service—your DNS resolution stops working until the service is restarted.

• CVE-2026-12969MEDIUM 5.3

  dnsmasq, a widely-deployed DNS and DHCP server, contains an out-of-bounds read flaw in how it processes DNS response packets. When a remote attacker controls a DNS zone and sends a specially crafted NXDOMAIN response, the vulnerable code reads 10 bytes beyond the intended buffer boundary in heap memory. This can expose residual data from previous DNS transactions—potentially including DNS queries, cached responses, or other transient information—without crashing the service. The vulnerability requires network access and DNS zone control but does not demand user interaction.