Coredns.io

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 17
    Known Exploited: 0
    1
    Critical Level Threats
    12
    High Level Threats
    3
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-62299

    CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record

    Last Modified: Jul 30, 2026
    Published: Jul 16, 2026

    CVE-2026-62309

    CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS

    Last Modified: Jul 30, 2026
    Published: Jul 16, 2026

    CVE-2026-62994

    CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

    Last Modified: Jul 30, 2026
    Published: Jul 16, 2026

    CVE-2026-35579

    CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports

    Last Modified: May 08, 2026
    Published: May 05, 2026

    CVE-2026-33489

    CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison

    Last Modified: May 08, 2026
    Published: May 05, 2026
    Items Per Page
    Coredns.io Vulnerabilities & Security CVEs | CVE-DB