CVE-2026-42255 affects Technitium DNS Server prior to version 15.0 and involves an incorrect implementation that permits DNS traffic amplification by exploiting cyclic name server delegation. This can lead to increased denial-of-service impact due to amplified DNS responses. The vulnerability is identified as CWE-684, reflecting an incorrect provision of specified functionality. The CVSS 3.1 base score is 7.2, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts integrity and availability. No patch or official remediation level has been published yet.

The vulnerability enables attackers to amplify DNS traffic by leveraging cyclic name server delegation, potentially causing denial-of-service conditions. It does not directly impact confidentiality but affects integrity and availability of the DNS service. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider monitoring DNS traffic for unusual amplification patterns and applying network-level rate limiting or filtering to mitigate potential abuse.