What is the CVSS score of CVE-2026-26018?

CVE-2026-26018 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Coredns are affected by CVE-2026-26018?

CoreDNS versions up to 1.14.2 are vulnerable to denial-of-service attacks that could crash DNS infrastructure, disrupting critical services dependent on name resolution.. A patch is available.

Is there a public PoC exploit available for CVE-2026-26018?

Yes, a public proof-of-concept exploit is available for CVE-2026-26018. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-26018?

Within 24 hours: Inventory all CoreDNS deployments and identify instances running versions 1.14.2 or earlier; validate current version in production. Within 7 days: Implement network-based rate limiting and query filtering to reduce attack surface; isolate CoreDNS infrastructure where possible; establish monitoring for abnormal DNS query patterns. Within 30 days: Subscribe to CoreDNS security advisories and prepare deployment procedures for immediate patching upon release; consider temporary migration to alternative DNS solutions if organizational risk tolerance is low.

Coredns CVE-2026-26018

HIGH

Predictable Seed in Pseudo-Random Number Generator (PRNG) (CWE-337)

2026-03-06 security-advisories@github.com

GHSA-h75p-j8xm-m278

Denial Of Service Coredns

7.5

CVSS 3.1 · Vendor: github

Severity by source

Vendor (github) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SUSE

HIGH

qualitative

Red Hat

7.5 HIGH

qualitative

Primary rating from Vendor (github).

CVSS VectorVendor: github

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

PoC Detected

Mar 09, 2026 - 20:32 vuln.today

Public exploit code

CVE Published

Mar 06, 2026 - 16:16 nvd

HIGH 7.5

DescriptionCVE.org

CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin that allows an attacker to crash the DNS server by sending specially crafted DNS queries. The vulnerability stems from the use of a predictable pseudo-random number generator (PRNG) for generating a secret query name, combined with a fatal error handler that terminates the entire process. This issue has been patched in version 1.14.2.

AnalysisAI

Coredns versions up to 1.14.2 contains a vulnerability that allows attackers to crash the DNS server by sending specially crafted DNS queries (CVSS 7.5).

Technical ContextAI

affects Coredns. CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin that allows an attacker to crash the DNS server by sending specially crafted DNS queries. The vulnerability stems from the use of a predictable pseudo-random number generator (PRNG) for generating a secret query name, combined with a fatal error handler that terminates the entire process. This issue has been patched in version 1.14.2.

RemediationAI

Fixed in version 1.14.2.. Restrict network access to the affected service where possible.

More in Coredns

View all

CVE-2026-26017 MEDIUM This Month POC

6.3 Mar 06

CoreDNS versions prior to 1.14.2 allow authenticated attackers to bypass DNS access controls through a Time-of-Check Tim

CVE-2025-68151 HIGH This Week

7.5 Jan 08

CoreDNS is a DNS server that chains plugins. Prior to version 1.14.0, multiple CoreDNS server implementations (gRPC, HTT

CVE-2025-47950 HIGH This Week

7.5 Jun 06

A denial of service vulnerability in versions (CVSS 7.5). High severity vulnerability requiring prompt remediation. Vend

CVE-2026-62309 HIGH This Week

7.5 Jul 16

Remote denial of service in CoreDNS versions prior to 1.14.4 allows an unauthenticated attacker to crash the DNS server

CVE-2026-62299 MEDIUM This Month

5.3 Jul 16

Nil pointer dereference in CoreDNS prior to 1.14.5 allows remote unauthenticated attackers to crash or degrade the DNS s

CVE-2026-62994 LOW Monitor

3.7 Jul 16

Unhandled Go runtime panic in CoreDNS 1.9.4 through 1.14.4 allows a network-reachable DNS client with AXFR permission to

Same weakness CWE-337 – Predictable Seed in Pseudo-Random Number Generator (PRNG)

View all

CVE-2024-7558 HIGH POC

8.0

CVE-2022-26852 CRITICAL

9.8

7.8

7.5

8.7

2.0

8.7

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

Vendor StatusVendor

SUSE

Severity: High

Product	Status
SUSE Package Hub 15 SP6	Fixed
openSUSE Leap 15.6	Fixed
openSUSE Tumbleweed	Fixed
openSUSE Leap 15.6	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP5	Fixed

CVE-2026-26018 vulnerability details – vuln.today

Back

Coredns CVE-2026-26018

Severity by source

CVSS VectorVendor: github

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Coredns

Same weakness CWE-337 – Predictable Seed in Pseudo-Random Number Generator (PRNG)

Same technique Denial Of Service

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code