5965 matches found
OESA-2026-3118 gnutls security update
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...
SUSE CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
SUSE CVE-2026-63728
Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...
CVE-2026-58275 Azure DNS Elevation of Privilege Vulnerability
...
PT-2026-65342
Summary A memory leak can be caused in Netty's DNS codec by sending malicious DNS packets containing invalid domain names. Because the leak occurs incrementally per packet, sustained malicious requests will cause a gradual Denial of Service. Details Inside...
CVE-2026-16381
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: DNS component...
DEBIAN-CVE-2026-39155
Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name can be computed incorrectly. This can create an overly broad authenticated denial interval, allowing downstream validating resolvers using aggressive negative caching to...
knot-doq
Knot Resolver 6.3.0 — DNS-over-QUIC heap overflow → RCE PoC...
New TrickBot Variant Spotted Using DNS to Control Infected Windows PCs
Fortinet has found a new TrickBot variant hiding commands in DNS traffic and using scheduled tasks and added modules to maintain access on infected Windows PCs...
CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
CVE-2026-52686
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
PQC Migration Now Has a Deadline. Does Your DNS Estate?
Learn why crypto-agility depends not just on adopting the right standards, but on maintaining a clear, unified view of your DNS environment before the migration begins...
Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries
...
Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
...
Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments
...
DNS Cookie bypass when combined with proxy-protocol use
...
Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass
...
CVE-2026-52688 RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
