Threats tagged 'rustsec-2026-0506'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.3	CVE-2026-123601Hickory net · Inverted NSEC3 comparison lets one record "prove" that almost any name does not exist High8.32026-09-03GCVE DatabaseCVE-2026-123601 A vulnerability in hickory-net's DNSSEC validation allows an attacker who can modify DNS responses to replay a signed NSEC3 record to falsely prove that existing DNS names do not exist. This is due to an inverted comparison in handling the last NSEC3 record in the zone's hash chain. The issue affects versions before 0.26.2 and has been fixed in version 0.26.2. Report on CVE-2026-123601 Vulnerability #rustsec-2026-0506 #crates-io	GCVE Database	2026-09-03

Page 1 of 1