CVE-2026-129468 · Other
NO FIX YET · SEE WHAT TO DO
Netcccyun dnsmgr 2.18 before 2.22 has a missing authorization check on the POST /cloudflare/get_domain_default_line endpoint. A restricted sub-user or single-domain login can iterate the domain_id parameter to read DNS line lists and default lines for domains they should not see.
first public Nov 15, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams that run dnsmgr as a self-hosted DNS management panel and give restricted or single-domain logins to users. Installations without restricted users have little exposure to this read-only data leak.
Not affected if no-restricted-users, single-admin-only
Who cares dns, dnsmgr, self-hosted
Unknown from the sources.
2.22 or later (the sources state 2.22 is the first fixed version).Netcccyun dnsmgr 2.18 before 2.22 contains a missing authorization vulnerability in POST /cloudflare/get_domain_default_line that allows restricted users to access domains outside their permissions. Restricted sub-users or single-domain logins can iterate the domain_id parameter to enumerate panel domain ids and read each domain's DNS line list and default line.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.