https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T15:39:51.259520+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123581 CVE-2026-123581 — Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRset 2026-11-10T15:39:51.260577+00:00

Affected: hickory-dns

Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw that accepts a response as a positive answer when any valid RRset appears in the answer section, without checking that the RRset is responsive to the query. Attackers can supply signed but unrelated RRsets so that responses lacking matching records are validated as positive answers instead of as no-data responses.