CVE-2026-33190

creationtimestamp| type| source ---|---|--- 2026-05-05 21:42:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml55pzrfbp2k...

CVE-2026-33190

CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports DoT, DoH, DoH3, DoQ, and gRPC because it trusts the transport writer's TsigStatus instead of performing verification itself. The DoH and DoH3 writer's TsigStatus...

coredns-1.14.3-1.1 on GA media (moderate)

coredns-1.14.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10673-1 Rating: moderate Cross-References: CVE-2026-27140 CVE-2026-27144 CVE-2026-32282 CVE-2026-33190 CVSS scores: CVE-2026-27140 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-27144 SUSE : 5.5...

CVE-2026-33190 vulnerabilities

Vulnerabilities for packages: juicefs, eks-distro, eks-distro-fips, k8sgateway-fips, kubernetes-dns-node-cache, k8sgateway, kubernetes-dns-node-cache-fips...