Improper Signature Validation in Hickory DNS by Hickory, Inc.

CVE-2026-123590

What is CVE-2026-123590?

Hickory DNS versions prior to 0.26.2 are susceptible to an improper signature validation vulnerability. The flaw allows attackers to exploit the DNSSEC protocol by delivering fabricated NSEC and NSEC3 records alongside legitimate responses. If a DNS record passes signature validation, an attacker can manipulate authority sections to produce false nonexistence proofs. This critical weakness could lead to various attacks, including cache poisoning or denial-of-service, threatening the integrity of DNS resolutions. For users and administrators, updating to the latest versions is essential to mitigate risks associated with this vulnerability.

References