Threats tagged 'rustsec-2026-0540'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.2	CVE-2026-123591Hickory net · Child-side NSEC or NSEC3 record accepted as proof that a delegation has no DS record High8.22026-09-03GCVE DatabaseCVE-2026-123591 A vulnerability in Hickory net's DNSSEC validation allows an attacker to falsely prove that a DNS delegation lacks a DS record by using a child-side NSEC or NSEC3 record with the SOA bit set. This flaw enables bypassing DNSSEC protections and forging records in the child zone without valid signatures. The issue affects versions prior to 0.26.2 and is fixed in version 0.26.2. Report on CVE-2026-123591 Vulnerability #rustsec-2026-0540 #crates-io	GCVE Database	2026-09-03

Page 1 of 1