https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T23:02:51.853386+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123602 CVE-2026-123602 — Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching 2026-11-11T23:02:51.854817+00:00

Affected: hickory-dns

The Hickory DNS recursor in all versions of hickory-recursor and in hickory-resolver 0.26.0-beta.1 before 0.26.2 (recursor feature) is vulnerable to ghost domain names attacks because it reuses child-side apex NS RRsets cached from zone NS queries for iterative resolution. By repeatedly querying a zone's NS records, an attacker keeps the stale RRset cached indefinitely, letting name servers whose delegation the parent revoked keep answering for the zone.