CVE-2026-123579
3.7 LOWpublic exploit availablePublished 2026-11-08 · Updated 2026-11-10
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
DNSSEC validation in Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 does not distinguish NODATA responses from wildcard-expanded positive responses. For a query that should return NODATA in a zone with wildcard records, an attacker can combine an NSEC3 record matching the query name with a signed wildcard record into a bogus positive response that validation accepts.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-358
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-108178
- MEDIUMCVE-2026-123542PoC
- MEDIUMCVE-2026-123600PoC
- HIGHCVE-2026-70174
- MEDIUMCVE-2026-85805
- MEDIUMCVE-2026-96303
- CRITICALCVE-2026-96760PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.