CVE-2026-101278: Trusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validation
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments should be prioritized for review?
Trusted Domain Project OpenDMARC deployments running versions up to 1.4.2 should be reviewed, particularly where the PSL wildcard handling path is used for origin validation.
What level of access does an attacker need?
The CVSS vector indicates network reachability with low privileges required and no user interaction. Public exploit availability is reported, so environments exposing affected functionality remotely should be treated as higher priority.