점검 대응높음KEV 미등록
CVE-2026-12490
NLnet Labs NSD, nsd 취약점
When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port (and not the tls-auth-port) or over over TCP over the regular port, when the other conditions of the provide-xfr rule match.
- 대응 우선순위
- 점검
- CVSS
- 8.2
- EPSS
- 0.16% 백분위 5.27% · 2026.08.03 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.06.25