Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:coredns:coredns:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

CoreDNS DoH/DoQ/gRPC RFC 2136 UPDATE Bypass

CoreDNS versions up to 1.14.6 fail to validate DNS UPDATE opcodes over DoH, DoH3, DoQ, and gRPC, allowing attackers to relay unauthorized updates to upstream servers.

CoreDNS dns vulnerability rfc-2136 denial-of-service cve-2026-82399 networking
1r 3t 1c
medium advisory

CoreDNS DNS Record Manipulation Vulnerability

A vulnerability in CoreDNS allows a remote, unauthenticated attacker to manipulate DNS records, potentially enabling traffic redirection or DNS cache poisoning.

CoreDNS dns vulnerability
1c