CVE-2026-47184Disclosure(paulsm / zeroconf)

LOWCVSS 6.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch paulsm zeroconf systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache._async_add inserted every response record into cache, _expirations, _expire_heap, and service_cache without a cap, allowing unauthenticated hosts on the local link over UDP/5353 (224.0.0.251 / ff02::fb) to multicast valid mDNS responses with unique names and cause memory exhaustion, slower cache lookups, slower async_expire passes, and broken discovery, registration, and ServiceBrowser callbacks. This issue is fixed in version 0.149.7.

paulsm CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Other references

https://github.com/python-zeroconf/python-zeroconf/releases/tag/0.149.7

Weakness type (CWE)

CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

zeroconf

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

paulsm

Products

zeroconf

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud92d
Disclosure
🚨*CVE* CVE-2026-47184 Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache._async_add inserted every response record into cache, _expirat… https://www.cve.org/CVERecord?id=CVE-2026-47184 ----- Traducción: CVE-2026-47184 Zer… http://infoflow.cloud`
Post summary
The post discloses CVE-2026-47184 affecting Zeroconf's DNSCache, notes the pre-0.149.7 bug, and references a CVE record, without providing evidence of active exploitation or PoC.
0000032
92 followersView on X
CVE@CVEnew92d
Disclosure
CVE-2026-47184 Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache._async_add inserted every response record into cache, _expirat… https://www.cve.org/CVERecord?id=CVE-2026-47184
Post summary
The provided text reports a vulnerability in the Zeroconf Python library before version 0.149.7, describing how DNS cache handling is faulty, but does not provide a PoC, exploit, or patch details.
00000658
57.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	paulsm	zeroconf	-	python	-

Explore more

Back to dashboard paulsm CVEs zeroconf vulnerabilities