CO
Vendor
coredns
15
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-86003 | CO coredns coredns | 7.5 | Sep 16 | CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP |
| CVE-2026-82399 | CO coredns coredns | 7.5 | Sep 16 | CoreDNS: Unauthenticated memory exhaustion in custom transports |
| CVE-2026-62299 | CO coredns coredns | 5.3 | Jul 16 | CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record |
| CVE-2026-62309 | CO coredns coredns | 7.5 | Jul 16 | CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS |
| CVE-2026-62994 | CO coredns coredns | 3.7 | Jul 16 | CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin |
| CVE-2026-35579 | CO coredns coredns | 9.8 | May 5 | CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports |
| CVE-2026-33489 | CO coredns coredns | 7.5 | May 5 | CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison |
| CVE-2026-32936 | CO coredns coredns | 7.5 | May 5 | CoreDNS DoH GET path missing size validation causes CPU and memory amplification |
| CVE-2026-32934 | CO coredns coredns | 7.5 | May 5 | CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of service |
| CVE-2026-33190 | CO coredns coredns | 7.5 | May 5 | CoreDNS TSIG authentication bypass on encrypted DNS transports |
| CVE-2026-26017 | CO coredns coredns | 6.3 | Mar 6 | CoreDNS ACL Bypass |
| CVE-2026-26018 | CO coredns coredns | 7.5 | Mar 6 | CoreDNS Loop Detection Denial of Service Vulnerability |
| CVE-2025-68151 | CO coredns coredns | 7.5 | Jan 8 | CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages |
| CVE-2025-58063 | CO coredns coredns | 7.1 | Sep 9 | CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion |
| CVE-2025-47950 | CO coredns coredns | 7.5 | Jun 6 | CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification |