TI-2026-25615 CVE-2026-33190 · GHSA-qhmp-q7xh-99rh
CoreDNS TSIG authentication bypass on encrypted DNS transports
Priority HIGH 77
CoreDNS is a DNS server that chains plugins.
coredns
Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9
Exploited now
coredns records in CISA KEVNo coredns vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
16 records in Coredns · all components
TI-2026-25384 CVE-2026-32936 · GHSA-63cw-r7xf-jmwr
CoreDNS DoH GET path missing size validation causes CPU and memory amplification
Priority HIGH 77
CoreDNS is a DNS server that chains plugins.
TI-2026-25382 CVE-2026-32934 · GHSA-2wpx-qpw2-g5h5
CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of service
Priority HIGH 77
CoreDNS is a DNS server that chains plugins.
TI-2026-27682 CVE-2026-35579 · GHSA-vp29-5652-4fw9
CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports
Priority HIGH 75
CoreDNS is a DNS server written in Go.
TI-2026-25885 CVE-2026-33489 · GHSA-h8mm-c463-wjq3
CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison
Priority HIGH 75
CoreDNS is a DNS server that chains plugins.
TI-2026-44486 CVE-2026-62299
NULL pointer dereference in coredns
Priority MEDIUM 63
CoreDNS is a DNS server written in Go.
TI-2026-44995 CVE-2026-62994 · GHSA-74w3-63xv-x9mv
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
Priority MEDIUM 51
CoreDNS is a DNS server written in Go.
TI-2026-21032 CVE-2026-26018 · GHSA-h75p-j8xm-m278
CoreDNS Loop Detection Denial of Service Vulnerability
Priority MEDIUM 41
CoreDNS is a DNS server that chains plugins.
TI-2025-30343 CVE-2025-47950 · GHSA-cvx7-x8pj-x2gw
CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification
Priority MEDIUM 41
CoreDNS is a DNS server that chains plugins.
TI-2026-44488 CVE-2026-62309
CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS
Priority MEDIUM 40
CoreDNS is a DNS server written in Go.
TI-2023-14301 CVE-2023-30464 · GHSA-h92q-fgpp-qhrq
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.
Priority LOW 39
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.
TI-2025-41731 CVE-2025-68151 · GHSA-527x-5wrf-22m2
CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages
Priority LOW 36
CoreDNS is a DNS server that chains plugins.
TI-2026-21031 CVE-2026-26017 · GHSA-c9v3-4pv7-87pr
CoreDNS ACL Bypass
Priority LOW 34
CoreDNS is a DNS server that chains plugins.
TI-2023-12995 CVE-2023-28452 · GHSA-hfmw-7g3m-gj6q
An issue was discovered in CoreDNS through 1.10.1.
Priority LOW 34
An issue was discovered in CoreDNS through 1.10.1.
TI-2022-02630 CVE-2022-2837 · GHSA-h828-v5pv-33qx
Open redirect in coreDNS
Priority LOW 27
A flaw was found in coreDNS.
TI-2022-02629 CVE-2022-2835 · GHSA-ch7v-37xg-75ph
A flaw was found in coreDNS.
Priority LOW 20
A flaw was found in coreDNS.