CVE-2026-101017

MEDIUMCVSS 6.5

Description

A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strcasecmp in the library libopendmarc/opendmarc_policy.c. The manipulation results in handling of exceptional conditions. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Timeline

Published:September 28th, 2026 9:17 AM

Last modified:September 28th, 2026 3:15 PM

CVSS Scoring

CVSS v3: 6.5 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CVSS v2: 6.4

Weaknesses (CWE)

CWE-755

References & Reports

Advisories, patches, and third-party reports

https://vuldb.com/cve/CVE-2026-101017
https://vuldb.com/submit/918247
https://vuldb.com/vuln/410887
https://vuldb.com/vuln/410887/cti
https://xuyongzhe-vt.github.io/share/opendmarc-subdomain-walk-abort.html

Source: NIST NVD · Data may lag official sources by up to one minute