CVE-2026-19538

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-19538
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19538.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-19538
Downstream
Published
2026-08-26T09:16:46Z
Modified
2026-09-10T08:11:45Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TLS and sending the query twice on connection that is kept open.

References

Affected packages

Git / github.com/nlnetlabs/nsd

Affected ranges

Type
GIT
Repo
https://github.com/nlnetlabs/nsd
Events
Introduced
f96f83fa834d970e63b77f261a7189065291043c
Fixed
a06e6ce15b11a18b2c7eddbf3a8053696c7fd28e
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:nlnetlabs:nsd:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.8.0"
        },
        {
            "fixed": "4.15.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

Other
NSD_4_10_0_RC1
NSD_4_10_1_RC1
NSD_4_10_1_RC2
NSD_4_10_1_REL
NSD_4_11_0_RC1
NSD_4_11_0_REL
NSD_4_11_1_REL
NSD_4_12_0_RC1
NSD_4_12_0_REL
NSD_4_13_0_RC1
NSD_4_13_0_REL
NSD_4_14_0_RC1
NSD_4_14_1_RC1
NSD_4_14_1_REL
NSD_4_14_2_RC1
NSD_4_14_2_REL
NSD_4_15_0_RC1
NSD_4_15_0_REL
NSD_4_8_0_RC1
NSD_4_8_0_REL
NSD_4_9_0_RC1
list

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19538.json"