Is CVE-2020-37196 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2020-37196 being exploited in the wild.

How severe is CVE-2020-37196?

High severity, with a CVSS score of 7.5, published 11 February 2026.

Which products and versions are affected?

Nsasoft Dnss Domain Name Search Software All versions.

Is there a fix for CVE-2020-37196?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2020-37196 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2020-37196?

Check whether you run Nsasoft Dnss Domain Name Search Software or Nsasoft Domain Name Search Software at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2020-37196: Nsasoft Dnss Domain Name Search Software buffer overflow in registration key

CVE-2020-37196 · Severity: high · CVSS 7.5 · Published 2026-02-11

Dnss Domain Name Search Software, a tool used for identifying available domain names, is vulnerable to a denial-of-service attack. An attacker can cause the application to crash by entering an excessively long registration key into the software's activation field. This prevents legitimate users from using the software until it is restarted.

Vendors: Nsasoft.

Quick answers

Is CVE-2020-37196 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2020-37196 being exploited in the wild.
How severe is CVE-2020-37196?: High severity, with a CVSS score of 7.5, published 11 February 2026.
Which products and versions are affected?: Nsasoft Dnss Domain Name Search Software All versions.
Is there a fix for CVE-2020-37196?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2020-37196 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2020-37196?: Check whether you run Nsasoft Dnss Domain Name Search Software or Nsasoft Domain Name Search Software at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A classic buffer overflow (CWE-120) exists in Dnss Domain Name Search Software due to insufficient input validation in the registration key field. An attacker can trigger this vulnerability by inputting a 1000-character buffer into the 'Enter Registration Code' dialog. This results in an application crash (Denial of Service). While the attack requires local interaction to paste the payload, some CVSS assessments categorize this as a network-based vector if the software is used in a shared environment. No patch is currently documented in the advisory, though the vulnerability was publicly disclosed with a Proof of Concept (PoC).

Affected products

Nsasoft (Nsauditor) Dnss Domain Name Search Software All versions

Timeline

2020-01-06: disclosed: Initial exploit PoC published on Exploit-DB
2026-02-11: advisory: CVE published/updated in NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.