CVE-2026-40209

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An attacker can cause outgoing TCP connections to a backend to remain stuck until a timeout occurs rather than being released immediately by sending IXFR (Incremental Zone Transfer) queries. This behavior can lead to a denial of service if the system reaches the limit of concurrent connections to the backend or exhausts available file descriptors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.