CVE-2026-93006

Name of the Vulnerable Software and Affected Versions dnsmasq versions prior to 2.93-3.1

Description A flaw in the TFTP server allows it to serve incorrect file contents because the transfer cache is not invalidated upon completion of a transfer. A local network attacker requesting a TFTP file can cause subsequent clients to receive cached data instead of the intended file. In PXE network-boot environments, this allows the substitution of boot content for a victim machine.

Recommendations Update to version 2.93-3.1.