CVE-2026-123583
LOW
NVD
CVSS Score
3.7
Severity
LOW
Published
Nov 08, 2026
Vendor
unknown
Description
The recursive resolver in Hickory DNS hickory-recursor 0.25.0 through 0.25.2 and hickory-resolver 0.26.0 before 0.26.2 does not apply out-of-bailiwick filtering to negative responses. Attackers able to supply crafted negative responses can include out-of-bailiwick records to facilitate cache poisoning and more easily exploit other DNSSEC verification flaws.