CVE-2026-58218

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description Samba's internal DNS server contains a flaw where unauthenticated TKEY registration requests are added to the TKEY name cache before they are rejected. A remote, unauthenticated attacker can send numerous TKEY requests with arbitrary names to exhaust the cache and evict legitimate TKEY entries. This process disrupts TSIG (Transaction Signature) authentication for signed DNS queries, leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.