GHSA-2hfw-w5cw-p4g7Published
Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-42254 · Microsoft / collected KEV context
cve-program · CVE-2026-42254
euvd · EUVD-2026-25687
nvd · CVE-2026-42254
osv · GHSA-83hf-93m4-rgwq
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.