Ccoredns

Products

Exploited and recent CVEs

• CVE-2026-86003 High 7.5 CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP 0.4%
• CVE-2026-82399 High 7.5 CoreDNS: Unauthenticated memory exhaustion in custom transports 0.6%
• CVE-2026-62299 Medium 5.3 CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record 0.5%
• CVE-2026-62309 High 7.5 CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS 0.7%
• CVE-2026-62994 Low 3.7 CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin 0.5%
• CVE-2026-35579 High 7.5 CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports 0.6%
• CVE-2026-33489 High 8.2 CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison 0.4%
• CVE-2026-32936 High 8.7 CoreDNS DoH GET path missing size validation causes CPU and memory amplification 0.7%
• CVE-2026-32934 High 8.7 CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of service 0.5%
• CVE-2026-33190 High 8.7 CoreDNS TSIG authentication bypass on encrypted DNS transports 0.4%
• CVE-2026-26017 High 7.7 CoreDNS ACL Bypass 0.4%
• CVE-2026-26018 High 7.5 CoreDNS Loop Detection Denial of Service Vulnerability 1.2%
• CVE-2025-68151 Medium 6.6 CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages 0.5%
• CVE-2025-58063 High 7.1 CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion 0.5%
• CVE-2025-47950 High 7.5 CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification 1.2%