🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-123607 HIGH Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123606 HIGH The hickory-dns recursor in hickory-recursor 0.25.0-alpha.3 through 0.25.2 and hickory-resolver 0.26.0-alpha.1 before 0.26.2 iterates every out-of-bai... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123605 HIGH Hickory DNS hickory-proto 0.1 through 0.25.0-alpha.3 and hickory-net before 0.26.2 contain a DNSSEC validation bypass because the validator verifies a... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123604 HIGH Hickory DNS hickory-resolver 0.26.0-beta.1 before 0.26.2 contains an unbounded retry loop in NameServerPool::try_send, which re-queues truncated (TC) ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123603 MEDIUM hickory-proto and hickory-resolver 0.26.0 before 0.26.2, hickory-server 0.25.0-alpha.1 before 0.26.2, and hickory-recursor 0.25.0-alpha.3 through 0.26... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123602 HIGH The Hickory DNS recursor in all versions of hickory-recursor and in hickory-resolver 0.26.0-beta.1 before 0.26.2 (recursor feature) is vulnerable to g... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123601 HIGH Hickory DNS hickory-proto 0.25.0 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 invert the relational operators in the wrap-around... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123600 MEDIUM Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net 0.26.0-alpha.1 before 0.26.2 contain a DNSSEC validation flaw in DnssecDnsHand... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123599 MEDIUM Hickory DNS hickory-proto before 0.26.0-beta.1 and hickory-net before 0.26.2 contain a DNSSEC validation bypass because verify_rrsets() ignores DNS cl... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123598 MEDIUM The validating recursor in Hickory DNS hickory-recursor 0.25.0 through 0.26.0-alpha.1, hickory-resolver 0.26.0-alpha.1 before 0.26.2, and hickory-net ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123597 MEDIUM Hickory DNS hickory-proto 0.25.0-alpha.1 through 0.26.0-alpha.1 and hickory-net before 0.26.2 contain a logic bug in DnssecDnsHandle's DS-fetch p... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123596 HIGH Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw in the validating recurs... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123595 HIGH Hickory DNS hickory-proto 0.25 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw in the validating r... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123594 MEDIUM Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain an NSEC validation flaw that returns a secure pro... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123593 MEDIUM Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto 0.24.0 through 0.26.0-alpha.1 compare DNSKEY public keys against DNSSEC trust an... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123592 HIGH The hickory-net crate in Hickory DNS 0.26.0-beta.1 before 0.26.2 allows DNSSEC validation bypass because Name's Hash ignores label lengths and Va... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123591 HIGH Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 fail to verify, per RFC 6840 §4.4, that an NSEC or NSEC3... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123590 MEDIUM Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 accept NSEC and NSEC3 records for DNSSEC nonexistence pro... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123589 MEDIUM The DNS-over-QUIC (DoQ) server in hickory-server (hickory-dns) before 0.26.2 does not apply any timeout when reading a request message from a QUIC str... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123588 HIGH The recursive resolver in Hickory DNS (all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2) caches an empty connecti... | HIGH | ????? | ????? | NVD | 6 days ago |