Search: CVE-2026-33489

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 0.4%	CVE-2026-33489coredns · Incorrect Authorization High8.2EPSS 0.4%2026-05-05GCVE DatabaseCVE-2026-33489 CVE-2026-33489 is an authorization vulnerability in CoreDNS versions prior to 1.14.3 affecting the transfer plugin. The plugin incorrectly selects ACL rules due to a lexicographic string comparison instead of a longest-suffix match, allowing unauthorized remote clients to perform zone transfers on subzones. This issue is fixed in CoreDNS version 1.14.3. EPSS 0.4%Vulnerability CWE-863	GCVE Database	2026-05-05

Page 1 of 1 · 1 duplicate CVE record merged