CVE-2026-123603

The hickory-dns ecosystem is vulnerable to an access control bypass due to a failure to canonicalize IPv4-mapped IPv6 addresses when evaluating deny_answers, deny_server, or AccessControlSet rules. Affected components include hickory-proto and hickory-resolver (before 0.26.2), hickory-server (0.2...

CVE-2026-123582

The validating recursive resolver and validating forwarder in Hickory DNS (hickory-server) versions 0.25.0 before 0.26.2 are vulnerable to a DNSSEC validation bypass . The root cause is that the software fails to verify if the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA...