tocsin

CVE-2026-86003

2 advisories.

Go/github.com/coredns/coredns CVE-2026-86003: high 7.5, EPSS 0.44%

CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

Action: Upgrade github.com/coredns/coredns to 1.14.7 or later.

go get github.com/coredns/coredns@v1.14.7

Affected

introducedfixedlast affected
01.14.7-

Fixed versions

1.14.7

Sources

CVE-2026-86003 · published · modified · JSON

Go/github.com/coredns/coredns CVE-2026-86003: unknown, EPSS 0.44%

CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP in github.com/coredns/coredns

Action: Upgrade github.com/coredns/coredns to 1.14.7 or later.

go get github.com/coredns/coredns@v1.14.7

Affected

introducedfixedlast affected
01.14.7-

Fixed versions

1.14.7

Sources

CVE-2026-86003 · published · modified · JSON