Is CVE-2026-4890 actively exploited?

No active exploitation of CVE-2026-4890 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-4890 be exploited remotely?

Yes. CVE-2026-4890 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-4890?

CVE-2026-4890 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2026-4890

HIGH

CVE-2026-4890

Published: May 11, 2026· Updated: May 12, 2026

7.5

CVSS v3.1

EPSS:0.18%probability of exploitation in 30 daysPercentile:39.5th

Official Description

A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.

NVD Source

Technical Analysis

CVE-2026-4890 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 7.5.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityNone

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

News & Research Mentioning CVE-2026-4890

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

The Hacker News· Jun 17, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor (JCE) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-48907 (CVSS score: 10.0), is a case of improper access control that could facilitate arbitrary [xlite_meta score:56 src:The Hacker News xlite_fp:567fc325777df7deadccfecc5c932cb10f3174b6d80adf2ab84bf3cb0bd5719c]

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Alerts· Jun 16, 2026

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies, updating BOD 22-01. BOD 26-04 reinforces the importance of the KEV catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common V [xlite_meta score:48 src:CISA Alerts xlite_fp:3d84dbba07cc2ff81925c49cc7928ee073d5411e6df370e944886052fa090664]