CVE-2026-40011: Prometheus denial of service via crafted DNS queries
An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-40011?
The severity of CVE-2026-40011 is categorized as low with a score of 3.7.
What software is affected by CVE-2026-40011?
CVE-2026-40011 affects the Prometheus software.
How does CVE-2026-40011 exploit work?
CVE-2026-40011 exploits by sending a large number of crafted DNS queries that trigger a dynamic block in Prometheus.
What are the potential impacts of CVE-2026-40011?
The potential impacts of CVE-2026-40011 include the rejection of the Prometheus endpoint by the scraper until the dynamic block expires.
How can I mitigate the effects of CVE-2026-40011?
To mitigate CVE-2026-40011, limit the rate of DNS queries to the Prometheus endpoint to avoid dynamic block insertion.