CVE-2026-35847 dnsmgr CVE debrief

Who should care

System administrators and security teams responsible for dnsmgr installations should be aware of this vulnerability and take immediate action to verify affected systems and apply patches or mitigations. Operators, platform administrators, and security teams should review affected scope, severity, and vendor guidance.

Technical summary

A critical vulnerability exists in dnsmgr v.2.15 and before, allowing local attackers to execute arbitrary code via the ping function of the CheckUils.php file. The vulnerability has a CVSS score of 9.8 and is classified as CRITICAL. Affected product context indicates dnsmgr installations are potentially vulnerable. Defensive impact is significant due to the critical CVSS score.

Defensive priority

Immediate attention recommended due to critical CVSS score of 9.8.

Recommended defensive actions

• Verify affected versions and apply vendor patches or updates
• Implement compensating controls to restrict access to vulnerable systems
• Monitor for suspicious activity related to dnsmgr
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

Evidence from official CVE and NVD sources indicates a critical vulnerability in dnsmgr v.2.15 and before, allowing local attackers to execute arbitrary code via the ping function of the CheckUils.php file. Limited details are available, and further verification is necessary. Defenders should verify affected scope, severity, and vendor guidance.

Official resources