CVE-2026-123592
MEDIUM
NVD
CVSS Score
5.9
Severity
MEDIUM
Published
Nov 08, 2026
Vendor
unknown
Description
The hickory-net crate in Hickory DNS 0.26.0-beta.1 before 0.26.2 allows DNSSEC validation bypass because Name's Hash ignores label lengths and ValidationCacheKey compares only that hash. An attacker controlling an unsigned delegation whose name differs from a signed target only in dot positions can prime an Insecure verdict, causing forged answers for the target to skip signature verification instead of returning SERVFAIL.