Coredns.io

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 19
    Known Exploited: 0
    1
    Critical Level Threats
    14
    High Level Threats
    3
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-86003

    CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

    Last Modified: Sep 19, 2026
    Published: Sep 16, 2026

    CVE-2026-82399

    CoreDNS: Unauthenticated memory exhaustion in custom transports

    Last Modified: Sep 18, 2026
    Published: Sep 16, 2026

    CVE-2026-62299

    CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record

    Last Modified: Jul 30, 2026
    Published: Jul 16, 2026

    CVE-2026-62309

    CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS

    Last Modified: Jul 30, 2026
    Published: Jul 16, 2026

    CVE-2026-62994

    CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

    Last Modified: Jul 30, 2026
    Published: Jul 16, 2026
    Items Per Page
    Coredns.io Vulnerabilities & Security CVEs | CVE-DB