Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin that allows an attacker to crash the DNS server by sending specially crafted DNS queries. The vulnerability stems from the use of a predictable pseudo-random number generator (PRNG) for generating a secret query name, combined with a fatal error handler that terminates the entire process. This issue has been patched in version 1.14.2.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-06 | 2 | Disclosure2 |
| 2026-03-12 | 1 | Patch1 |
| 2026-05-09 | 1 | General1 |
CVE-2026-26018: CoreDNS Loop Detection Denial of Service - What It Means for Your Business and How to Respond https://hubs.li/Q04g0Zd30
Post summary
The referenced CVE-2026-26018 is a Denial of Service flaw in CoreDNS; the article promises to discuss its business impact and response measures, but no PoC, exploit code, patch, or active exploitation details are provided.
CoreDNS security updates for Fedora and openSUSE fix DNS access control bypass CVE-2026-26017 and DoS flaws CVE-2026-26018, CVE-2025-68156. Patch promptly. #Vulnerabilities https://threatcluster.io/cluster/critical-security-updates-for-coredns-address-multiple-vulne-4f3dc5f5
Post summary
Fedora and openSUSE releases for CoreDNS contain patches for CVE‑2026‑26017, CVE‑2026‑26018, and CVE‑2025‑68156, with a call to promptly apply the updates.
CVE-2026-26018 Denial of Service Vulnerability in CoreDNS Loop Detection Plugin Before 1.14.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26018
Post summary
CVE-2026-26018 is identified as a denial‑of‑service vulnerability in the CoreDNS Loop Detection plugin prior to version 1.14.2, as reported by vulmon.
CVE-2026-26018 CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin that allows an attac… https://www.cve.org/CVERecord?id=CVE-2026-26018
Post summary
The tweet announces a denial of service vulnerability in CoreDNS's loop detection plugin affecting versions before 1.14.2, without providing PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | coredns.io | coredns | - | - | - |