Photon OS 5.0: Coredns PHSA-2026-5.0-0794

An update of the coredns package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0794. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-26017 affecting package coredns for versions less than 1.11.4-15

CVE-2026-26017 affecting package coredns for versions less than 1.11.4-15. A patched version of the package is available...

CVE-2026-26017

creationtimestamp| type| source ---|---|--- 2026-03-06 18:40:06+00:00| seen| https://gist.github.com/alon710/a8817b46e521d68e9ffadb12fd700261 2026-03-07 10:01:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghl3bf2or2n 2026-03-16 00:00:00+00:00| seen|...

AZL-79526 CVE-2026-26017 affecting package coredns 1.11.1-25

CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed due to the default execution order of plugins. Security plugins such as acl are evaluated before the rewrite plugin, resulting in a Time-of-Check...