Search: CVE-2026-35579

CoreDNS versions prior to 1.14.3 have a vulnerability in TSIG authentication handling on gRPC, QUIC, DoH, and DoH3 transports. The gRPC and QUIC transports verify only the TSIG key name but do not validate the HMAC, allowing requests with forged MACs to bypass authentication if the key name matches. The DoH and DoH3 transports do not verify TSIG at all, accepting any TSIG record regardless of key name or MAC validity. This flaw enables attackers to bypass TSIG authentication and access TSIG-protected operations such as zone transfers and dynamic updates.