CVE-2026-123601

The Hickory DNS library is vulnerable to an NSEC3 Proof of Nonexistence Forgery in hickory-proto versions 0.25.0 through 0.26.0-alpha.1 and hickory-net versions 0.26.0-beta.1 before 0.26.2 . The root cause is inverted relational operators within the wrap-around branch of the find_covering_record(...

EUVD-2026-119360

Hickory DNS hickory-proto 0.25.0 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 invert the relational operators in the wrap-around branch of findcoveringrecord in nsec3.rs, so the last NSEC3 record in a zone's hash ring covers every hash except its owner. Attackers able to...

CVE-2026-123601: hickory-dns: Hickory DNS hickory-proto 0.25.0 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 invert the…

Hickory DNS hickory-proto 0.25.0 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 invert the relational operators in the wrap-around branch of findcoveringrecord in nsec3.rs, so the last NSEC3 record in a zone's hash ring covers every hash except its owner. Attackers able to...

PT-2026-139882

Hickory DNS hickory-proto 0.25.0 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 invert the relational operators in the wrap-around branch of find covering record in nsec3.rs, so the last NSEC3 record in a zone's hash ring covers every hash except its owner. Attackers able to...