Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed due to the default execution order of plugins. Security plugins such as acl are evaluated before the rewrite plugin, resulting in a Time-of-Check Time-of-Use (TOCTOU) flaw. This issue has been patched in version 1.14.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-06 | 3 | Disclosure3 |
| 2026-03-10 | 1 | Disclosure1 |
| 2026-03-11 | 1 | Disclosure1 |
| 2026-03-12 | 1 | Patch1 |
CoreDNS security updates for Fedora and openSUSE fix DNS access control bypass CVE-2026-26017 and DoS flaws CVE-2026-26018, CVE-2025-68156. Patch promptly. #Vulnerabilities https://threatcluster.io/cluster/critical-security-updates-for-coredns-address-multiple-vulne-4f3dc5f5
Post summary
The text announces that Fedora and openSUSE CoreDNS updates include patches for three CVEs, fixing an access control bypass and DoS issues.
new CoreDNS CVE (CVE-2026-26017) — ACL bypass via plugin-chain TOCTOU. DNS is part of your security boundary whether you think about it that way or not. most teams don't.
Post summary
A new CoreDNS CVE (CVE‑2026‑26017) is disclosed as an ACL bypass through a plugin‑chain TOCTOU, but no PoC, exploit, or patch information is provided.
🔴 CoreDNS, ACL Bypass, #CVE-2026-26017 (High) https://dailycve.com/coredns-acl-bypass-cve-2026-26017-high/
Post summary
The tweet announces a high‑severity ACL bypass vulnerability in CoreDNS (CVE‑2026‑26017) and links to a dailycve article for further details.
CVE-2026-26017 CoreDNS DNS Access Control Bypass Vulnerability in Versions Prior to 1.14.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26017
Post summary
The text announces CoreDNS DNS access control bypass (CVE-2026-26017) affecting versions before 1.14.2 and links to a vulnerability details page.
🔴 CoreDNS, TOCTOU, #CVE-2026-26017 (High) https://dailycve.com/coredns-toctou-cve-2026-26017-high/
Post summary
The tweet announces the CoreDNS TOCTOU vulnerability CVE-2026-26017 as a high‑severity flaw, but provides no exploit details or mitigation information.
CVE-2026-26017 CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed due to the default … https://www.cve.org/CVERecord?id=CVE-2026-26017
Post summary
A logical flaw in CoreDNS versions prior to 1.14.2 enables bypass of DNS access controls; the issue is documented as CVE-2026-26017, but no PoC, exploit, or patch details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | coredns.io | coredns | - | - | - |