CVE-2026-101014High· 7.3▾ MidnightPoC availableA vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_util_cleanup in the library libopendmarc/opendmarc_util.c of the component DMARC Record Parser. Perfor…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 40.2 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Exploit / PoC code exists
0.3%
A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_util_cleanup in the library libopendmarc/opendmarc_util.c of the component DMARC Record Parser. Performing a manipulation results in off-by-one. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named b3b1da9264bc80324094a27c71e7369bdedc62ae. To fix this issue, it is recommended to deploy a patch.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-101279Medium· 6.5A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2
CVE-2026-100889High· 7.3A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0
CVE-2026-101280High· 7.3A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2
CVE-2026-101281High· 7.3A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2
CVE-2026-101278Medium· 4.3A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2
CVE-2026-101017Medium· 6.5A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2