CVE-2026-123585
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Nov 08, 2026
Vendor
unknown
Description
The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are unnecessary to answer the original request. Attackers controlling DNS responses can include CNAME records in the authority or additional sections, or outside the original query name's CNAME chain, causing excess resolver queries and increased query amplification.