CVE-2026-123593

The hickory-net (version 0.26.0-beta.1 before 0.26.2) and hickory-proto (versions 0.24.0 through 0.26.0-alpha.1) components in Hickory DNS are vulnerable to a DNSSEC Validation Bypass . The root cause is that the software compares DNSKEY public keys against DNSSEC trust anchors without verifying ...

CVE-2026-123593 Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchors

Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto 0.24.0 through 0.26.0-alpha.1 compare DNSKEY public keys against DNSSEC trust anchors without checking the DNSKEY record name, so an RRset made up only of trusted keys is accepted without RRSIG verification. Attackers able to...