CVE-2026-4891 is a dnsmasq DNSSEC validation flaw disclosed on May 11, 2026, in which crafted DNS packets can trigger a heap-based out-of-bounds read, exposing memory information or contributing to service disruption in systems that rely on vulnerable dnsmasq builds. The oddity is not that a...