Medium 6.8Published Aug 12, 2026

CVE-2026-71194In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests.

Updated under an hour ago (2026-10-19 06:25 UTC)

Does this affect you?

It affects OpenStack Designate. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for OpenStack Designate

Exploited in the last 30 days

In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS queries through that path. The _handle_notify path is exploitable via a single unauthenticated UDP packet. This is independently reachable through the cross-tenant zone overlap described in a different recent CVE, and also affects legitimate same-tenant cross-pool configurations. BIND9 views do not mitigate this issue as mDNS is a shared service upstream of any view configuration.

CVSS: 6.8 MEDIUM (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Weakness (CWE): CWE-669
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: mitre
NVD analysis: Awaiting Analysis
Record last updated: Aug 13, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

OpenStack Designate openstack:designate (from the name)	from 1.0.0 before 20.0.2; from 21.0.0 before 21.0.1; from 22.0.0 before 22.0.2	CNA record

References

https://launchpad.net/bugs/2160533issue-tracking
https://security.openstack.org/ossa/OSSA-2026-034.htmlvendor-advisory
https://www.openwall.com/lists/oss-security/2026/08/11/6issue-tracking, vendor-advisory, mailing-list

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.