CVE-2026-2291 is a May 2026 dnsmasq vulnerability in the extract_name() DNS parsing code that can enable cache poisoning or denial of service in affected Linux and embedded resolver deployments, with Microsoft’s Security Update Guide carrying the record rather than shipping a Windows patch. That...