CVE-2026-93010

Name of the Vulnerable Software and Affected Versions dnsmasq (affected versions not specified)

Description A flaw exists when the DHCP leasequery feature is enabled without a defined list of allowed source addresses. In this configuration, the server fails to verify the identity of the requester, allowing a host on the local network to retrieve DHCP lease records. This can lead to the exposure of assigned IP addresses, MAC addresses, hostnames, and other lease metadata. This feature is disabled by default.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict the use of the DHCP leasequery feature by listing only trusted source addresses or keep the feature disabled.