Логотип exploitDog
bind:CVE-2026-26017
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2026-26017

Количество 5

Количество 5

redhat логотип

CVE-2026-26017

21 день назад

CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed due to the default execution order of plugins. Security plugins such as acl are evaluated before the rewrite plugin, resulting in a Time-of-Check Time-of-Use (TOCTOU) flaw. This issue has been patched in version 1.14.2.

CVSS3: 7.7
EPSS: Низкий
nvd логотип

CVE-2026-26017

21 день назад

CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed due to the default execution order of plugins. Security plugins such as acl are evaluated before the rewrite plugin, resulting in a Time-of-Check Time-of-Use (TOCTOU) flaw. This issue has been patched in version 1.14.2.

CVSS3: 7.7
EPSS: Низкий
msrc логотип

CVE-2026-26017

18 дней назад

CoreDNS ACL Bypass

CVSS3: 7.7
EPSS: Низкий
debian логотип

CVE-2026-26017

21 день назад

CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, ...

CVSS3: 7.7
EPSS: Низкий
github логотип

GHSA-c9v3-4pv7-87pr

21 день назад

CoreDNS ACL Bypass

CVSS3: 7.7
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2026-26017

CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed due to the default execution order of plugins. Security plugins such as acl are evaluated before the rewrite plugin, resulting in a Time-of-Check Time-of-Use (TOCTOU) flaw. This issue has been patched in version 1.14.2.

CVSS3: 7.7
0%
Низкий
21 день назад
nvd логотип
CVE-2026-26017

CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed due to the default execution order of plugins. Security plugins such as acl are evaluated before the rewrite plugin, resulting in a Time-of-Check Time-of-Use (TOCTOU) flaw. This issue has been patched in version 1.14.2.

CVSS3: 7.7
0%
Низкий
21 день назад
msrc логотип
CVE-2026-26017

CoreDNS ACL Bypass

CVSS3: 7.7
0%
Низкий
18 дней назад
debian логотип
CVE-2026-26017

CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, ...

CVSS3: 7.7
0%
Низкий
21 день назад
github логотип
GHSA-c9v3-4pv7-87pr

CoreDNS ACL Bypass

CVSS3: 7.7
0%
Низкий
21 день назад

Уязвимостей на страницу