CVE-2026-101280Proof of concept (PoC) published · CISASuited to automated attack · CISA
Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing
CVSS score
6.9
EPSS probability
%0.4
Risk score
0.0
Published
14 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
6.9
CVE-2026-100895
Trusted Domain Project OpenARC libopenarc arc-canon.c arc_parse_canon_t null pointer dereference
TD
Patch verifiedEPSS %1
6.9
CVE-2026-101281
Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication
TD
Patch verifiedEPSS %0
6.9
CVE-2026-100890
Trusted Domain Project OpenDMARC SPF Parser opendmarc_spf.c opendmarc_spf_ipv6_explode null pointer dereference
TD
Patch status unknownEPSS %0
6.9
CVE-2026-101279
Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow
TD
Patch status unknownEPSS %0
6.9
CVE-2026-101017
Trusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional condition
TD
Patch status unknownEPSS %0
6.9
CVE-2026-101016
Trusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional condition
TD
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-101280"