CVE-2026-123591
5.9 MEDIUMpublic exploit availablePublished 2026-11-08 · Updated 2026-11-10
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 fail to verify, per RFC 6840 §4.4, that an NSEC or NSEC3 record denying a DS RRset also proves the delegation's NS record exists. Attackers can reuse child-side NSEC or NSEC3 records to fake an insecure delegation and forge child-zone records.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-345
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2022-30267PoC
- UNSCOREDCVE-2025-12999PoC
- UNSCOREDCVE-2025-66621
- HIGHCVE-2026-100872PoC
- MEDIUMCVE-2026-101278
- MEDIUMCVE-2026-102140PoC
- UNSCOREDCVE-2026-102250
- HIGHCVE-2026-102267PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.