CVE WATCH / VULNERABILITY DETAIL

CVE-2026-123593

MEDIUMCVSS 4.8NVD feed

Published 8 November 2026 · tracked since 8 November 2026

Description

Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto 0.24.0 through 0.26.0-alpha.1 compare DNSKEY public keys against DNSSEC trust anchors without checking the DNSKEY record name, so an RRset made up only of trusted keys is accepted without RRSIG verification. Attackers able to spoo

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools