CVE Intelligence

Hickory Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Hickory Project products: 1 record(s), with severity, exploitation and fixes.

Hickory DNS 1

Exploited only (KEV) →

CVE-2026-42254 Medium · 4.0 CWE-706 Apr 26, 2026
Use of Incorrectly-Resolved Name or Reference in Hickory Project Hickory DNS
Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response.