Threats tagged 'ghsa-6fg5-mp7g-rgj8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.2	CVE-2026-123591Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 fail to verify, per RFC High8.22026-11-08GCVE DatabaseCVE-2026-123591 Hickory DNS versions hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 do not properly verify, according to RFC 6840 §4.4, that an NSEC or NSEC3 record denying a DS RRset also proves the existence of the delegation's NS record. This flaw allows attackers to reuse child-side NSEC or NSEC3 records to fake an insecure delegation and forge child-zone records. Report on CVE-2026-123591 Vulnerability CWE-345 #ghsa-6fg5-mp7g-rgj8	GCVE Database	2026-11-08

Page 1 of 1