# CVE-2026-42255: Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation.

Source: https://junglewise.ai/threats/cve-2026-42255-technitium-dns-server-before-15-0-allows-dns-traffic  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-26  
License: CC BY 4.0 with a link back

CVE-2026-42255 · Severity: high · CVSS 7.2 · Published 2026-04-26

Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation.

Technologies: [Technitium Dnsserver](https://junglewise.ai/threats/technologies/dnsserver). Vendors: [Technitium](https://junglewise.ai/threats/vendors/technitium).

## Quick answers

**Is CVE-2026-42255 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-42255 being exploited in the wild.

**How severe is CVE-2026-42255?** High severity, with a CVSS score of 7.2, published 26 April 2026.

**Which products and versions are affected?** Technitium Dnsserver. The advisory does not name versions.

**Is there a fix for CVE-2026-42255?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-42255?** Check whether you run Technitium Dnsserver. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Technitium Dnsserver

## Related threats

- [Technitium DNS Server denial of service in rate-limiting component](https://junglewise.ai/threats/cve-2025-50334-technitium-dns-server-denial-of-service-in-rate-limiting)
- [An issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake…](https://junglewise.ai/threats/cve-2024-56089-an-issue-in-technitium-through-v13-2-2-enables-attackers-to)