Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-12490

When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port (and not the tls-auth-port) or over over TCP over the regular port, when the other conditions of the provide-xfr rule match.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 3.6%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-12490
  • Nlnetlabs » Nsd » Version: 3.0.0
    cpe:2.3:a:nlnetlabs:nsd:3.0.0
  • Nlnetlabs » Nsd » Version: 3.0.1
    cpe:2.3:a:nlnetlabs:nsd:3.0.1
  • Nlnetlabs » Nsd » Version: 3.0.2
    cpe:2.3:a:nlnetlabs:nsd:3.0.2
  • Nlnetlabs » Nsd » Version: 3.0.3
    cpe:2.3:a:nlnetlabs:nsd:3.0.3
  • Nlnetlabs » Nsd » Version: 3.0.4
    cpe:2.3:a:nlnetlabs:nsd:3.0.4
  • Nlnetlabs » Nsd » Version: 3.0.5
    cpe:2.3:a:nlnetlabs:nsd:3.0.5
  • Nlnetlabs » Nsd » Version: 3.0.6
    cpe:2.3:a:nlnetlabs:nsd:3.0.6
  • Nlnetlabs » Nsd » Version: 3.0.7
    cpe:2.3:a:nlnetlabs:nsd:3.0.7
  • Nlnetlabs » Nsd » Version: 3.0.8
    cpe:2.3:a:nlnetlabs:nsd:3.0.8
  • Nlnetlabs » Nsd » Version: 3.1.0
    cpe:2.3:a:nlnetlabs:nsd:3.1.0
  • Nlnetlabs » Nsd » Version: 3.1.1
    cpe:2.3:a:nlnetlabs:nsd:3.1.1
  • Nlnetlabs » Nsd » Version: 3.2.0
    cpe:2.3:a:nlnetlabs:nsd:3.2.0
  • Nlnetlabs » Nsd » Version: 3.2.1
    cpe:2.3:a:nlnetlabs:nsd:3.2.1
  • Nlnetlabs » Nsd » Version: 3.2.10
    cpe:2.3:a:nlnetlabs:nsd:3.2.10
  • Nlnetlabs » Nsd » Version: 3.2.15
    cpe:2.3:a:nlnetlabs:nsd:3.2.15
  • Nlnetlabs » Nsd » Version: 3.2.3
    cpe:2.3:a:nlnetlabs:nsd:3.2.3
  • Nlnetlabs » Nsd » Version: 3.2.4
    cpe:2.3:a:nlnetlabs:nsd:3.2.4
  • Nlnetlabs » Nsd » Version: 3.2.5
    cpe:2.3:a:nlnetlabs:nsd:3.2.5
  • Nlnetlabs » Nsd » Version: 3.2.6
    cpe:2.3:a:nlnetlabs:nsd:3.2.6
  • Nlnetlabs » Nsd » Version: 3.2.7
    cpe:2.3:a:nlnetlabs:nsd:3.2.7
  • Nlnetlabs » Nsd » Version: 3.2.8
    cpe:2.3:a:nlnetlabs:nsd:3.2.8
  • Nlnetlabs » Nsd » Version: 3.2.9
    cpe:2.3:a:nlnetlabs:nsd:3.2.9
  • Nlnetlabs » Nsd » Version: 4.0.1
    cpe:2.3:a:nlnetlabs:nsd:4.0.1
  • Nlnetlabs » Nsd » Version: 4.0.2
    cpe:2.3:a:nlnetlabs:nsd:4.0.2
  • Nlnetlabs » Nsd » Version: 4.0.3
    cpe:2.3:a:nlnetlabs:nsd:4.0.3
  • Nlnetlabs » Nsd » Version: 4.1.0
    cpe:2.3:a:nlnetlabs:nsd:4.1.0
  • Nlnetlabs » Nsd » Version: 4.1.1
    cpe:2.3:a:nlnetlabs:nsd:4.1.1
  • Nlnetlabs » Nsd » Version: 4.1.10
    cpe:2.3:a:nlnetlabs:nsd:4.1.10
  • Nlnetlabs » Nsd » Version: 4.1.11
    cpe:2.3:a:nlnetlabs:nsd:4.1.11
  • Nlnetlabs » Nsd » Version: 4.1.12
    cpe:2.3:a:nlnetlabs:nsd:4.1.12
  • Nlnetlabs » Nsd » Version: 4.1.13
    cpe:2.3:a:nlnetlabs:nsd:4.1.13
  • Nlnetlabs » Nsd » Version: 4.1.14
    cpe:2.3:a:nlnetlabs:nsd:4.1.14
  • Nlnetlabs » Nsd » Version: 4.1.15
    cpe:2.3:a:nlnetlabs:nsd:4.1.15
  • Nlnetlabs » Nsd » Version: 4.1.16
    cpe:2.3:a:nlnetlabs:nsd:4.1.16
  • Nlnetlabs » Nsd » Version: 4.1.17
    cpe:2.3:a:nlnetlabs:nsd:4.1.17
  • Nlnetlabs » Nsd » Version: 4.1.18
    cpe:2.3:a:nlnetlabs:nsd:4.1.18
  • Nlnetlabs » Nsd » Version: 4.1.19
    cpe:2.3:a:nlnetlabs:nsd:4.1.19
  • Nlnetlabs » Nsd » Version: 4.1.2
    cpe:2.3:a:nlnetlabs:nsd:4.1.2
  • Nlnetlabs » Nsd » Version: 4.1.20
    cpe:2.3:a:nlnetlabs:nsd:4.1.20
  • Nlnetlabs » Nsd » Version: 4.1.21
    cpe:2.3:a:nlnetlabs:nsd:4.1.21
  • Nlnetlabs » Nsd » Version: 4.1.22
    cpe:2.3:a:nlnetlabs:nsd:4.1.22
  • Nlnetlabs » Nsd » Version: 4.1.23
    cpe:2.3:a:nlnetlabs:nsd:4.1.23
  • Nlnetlabs » Nsd » Version: 4.1.24
    cpe:2.3:a:nlnetlabs:nsd:4.1.24
  • Nlnetlabs » Nsd » Version: 4.1.25
    cpe:2.3:a:nlnetlabs:nsd:4.1.25
  • Nlnetlabs » Nsd » Version: 4.1.26
    cpe:2.3:a:nlnetlabs:nsd:4.1.26
  • Nlnetlabs » Nsd » Version: 4.1.27
    cpe:2.3:a:nlnetlabs:nsd:4.1.27
  • Nlnetlabs » Nsd » Version: 4.1.3
    cpe:2.3:a:nlnetlabs:nsd:4.1.3
  • Nlnetlabs » Nsd » Version: 4.1.4
    cpe:2.3:a:nlnetlabs:nsd:4.1.4
  • Nlnetlabs » Nsd » Version: 4.1.5
    cpe:2.3:a:nlnetlabs:nsd:4.1.5
  • Nlnetlabs » Nsd » Version: 4.1.6
    cpe:2.3:a:nlnetlabs:nsd:4.1.6
  • Nlnetlabs » Nsd » Version: 4.1.7
    cpe:2.3:a:nlnetlabs:nsd:4.1.7
  • Nlnetlabs » Nsd » Version: 4.1.8
    cpe:2.3:a:nlnetlabs:nsd:4.1.8
  • Nlnetlabs » Nsd » Version: 4.1.9
    cpe:2.3:a:nlnetlabs:nsd:4.1.9
  • Nlnetlabs » Nsd » Version: 4.10.0
    cpe:2.3:a:nlnetlabs:nsd:4.10.0
  • Nlnetlabs » Nsd » Version: 4.10.1
    cpe:2.3:a:nlnetlabs:nsd:4.10.1
  • Nlnetlabs » Nsd » Version: 4.11.0
    cpe:2.3:a:nlnetlabs:nsd:4.11.0
  • Nlnetlabs » Nsd » Version: 4.11.1
    cpe:2.3:a:nlnetlabs:nsd:4.11.1
  • Nlnetlabs » Nsd » Version: 4.12.0
    cpe:2.3:a:nlnetlabs:nsd:4.12.0
  • Nlnetlabs » Nsd » Version: 4.12.1
    cpe:2.3:a:nlnetlabs:nsd:4.12.1
  • Nlnetlabs » Nsd » Version: 4.13.0
    cpe:2.3:a:nlnetlabs:nsd:4.13.0
  • Nlnetlabs » Nsd » Version: 4.14.0
    cpe:2.3:a:nlnetlabs:nsd:4.14.0
  • Nlnetlabs » Nsd » Version: 4.14.1
    cpe:2.3:a:nlnetlabs:nsd:4.14.1
  • Nlnetlabs » Nsd » Version: 4.14.2
    cpe:2.3:a:nlnetlabs:nsd:4.14.2
  • Nlnetlabs » Nsd » Version: 4.2.0
    cpe:2.3:a:nlnetlabs:nsd:4.2.0
  • Nlnetlabs » Nsd » Version: 4.2.1
    cpe:2.3:a:nlnetlabs:nsd:4.2.1
  • Nlnetlabs » Nsd » Version: 4.2.2
    cpe:2.3:a:nlnetlabs:nsd:4.2.2
  • Nlnetlabs » Nsd » Version: 4.2.3
    cpe:2.3:a:nlnetlabs:nsd:4.2.3
  • Nlnetlabs » Nsd » Version: 4.2.4
    cpe:2.3:a:nlnetlabs:nsd:4.2.4
  • Nlnetlabs » Nsd » Version: 4.3.0
    cpe:2.3:a:nlnetlabs:nsd:4.3.0
  • Nlnetlabs » Nsd » Version: 4.3.1
    cpe:2.3:a:nlnetlabs:nsd:4.3.1
  • Nlnetlabs » Nsd » Version: 4.3.2
    cpe:2.3:a:nlnetlabs:nsd:4.3.2
  • Nlnetlabs » Nsd » Version: 4.3.3
    cpe:2.3:a:nlnetlabs:nsd:4.3.3
  • Nlnetlabs » Nsd » Version: 4.3.4
    cpe:2.3:a:nlnetlabs:nsd:4.3.4
  • Nlnetlabs » Nsd » Version: 4.3.5
    cpe:2.3:a:nlnetlabs:nsd:4.3.5
  • Nlnetlabs » Nsd » Version: 4.3.6
    cpe:2.3:a:nlnetlabs:nsd:4.3.6
  • Nlnetlabs » Nsd » Version: 4.3.7
    cpe:2.3:a:nlnetlabs:nsd:4.3.7
  • Nlnetlabs » Nsd » Version: 4.3.8
    cpe:2.3:a:nlnetlabs:nsd:4.3.8
  • Nlnetlabs » Nsd » Version: 4.3.9
    cpe:2.3:a:nlnetlabs:nsd:4.3.9
  • Nlnetlabs » Nsd » Version: 4.4.0
    cpe:2.3:a:nlnetlabs:nsd:4.4.0
  • Nlnetlabs » Nsd » Version: 4.5.0
    cpe:2.3:a:nlnetlabs:nsd:4.5.0
  • Nlnetlabs » Nsd » Version: 4.6.0
    cpe:2.3:a:nlnetlabs:nsd:4.6.0
  • Nlnetlabs » Nsd » Version: 4.6.1
    cpe:2.3:a:nlnetlabs:nsd:4.6.1
  • Nlnetlabs » Nsd » Version: 4.7.0
    cpe:2.3:a:nlnetlabs:nsd:4.7.0
  • Nlnetlabs » Nsd » Version: 4.8.0
    cpe:2.3:a:nlnetlabs:nsd:4.8.0
  • Nlnetlabs » Nsd » Version: 4.9.0
    cpe:2.3:a:nlnetlabs:nsd:4.9.0
  • Nlnetlabs » Nsd » Version: 4.9.1
    cpe:2.3:a:nlnetlabs:nsd:4.9.1


Contact Us

Shodan ® - All rights reserved