Technitium DNS Server prior to version 15.0 contains a vulnerability (CVE-2026-42255) classified as CWE-684, where cyclic name server delegation can be abused to amplify DNS traffic. This amplification can degrade service availability and potentially impact data integrity. The CVSS v3.1 base score is 7.2 (high), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and scope change. No patch or official remediation guidance is currently available, and no exploits have been observed in the wild.

The vulnerability allows attackers to cause DNS traffic amplification via cyclic name server delegation, which can degrade the availability of the DNS service and potentially affect its integrity. There is no confidentiality impact reported. The high CVSS score indicates a significant risk if exploited, but no active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should monitor for unusual DNS traffic patterns indicative of amplification attacks and consider implementing network-level protections such as rate limiting or filtering of DNS queries related to cyclic delegations.