CVE-2026-101281Published
Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-101281 · Microsoft / collected KEV context
cve-program · CVE-2026-101281
- https://vuldb.com/vuln/411038
- https://vuldb.com/vuln/411038/cti
- https://vuldb.com/cve/CVE-2026-101281
- https://vuldb.com/submit/918284
- https://github.com/trusteddomainproject/OpenDMARC/issues/262
- https://github.com/trusteddomainproject/OpenDMARC/pull/328
- https://xuyongzhe-vt.github.io/share/opendmarc-spf-postmaster-macro.html
- https://github.com/trusteddomainproject/OpenDMARC/commit/c48a74c758677fc5272a73eff15ffdbf8afda1a6
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.