CVE-2026-35579 | coredns TSIG-gated Plugin up to 1.14.2 dns.TsigVerify MAC improper authentication (GHSA-vp29-5652-4fw9)

A vulnerability was found in coredns TSIG-gated Plugin up to 1.14.2. It has been classified as critical. Affected is the function dns.TsigVerify. This manipulation of the argument MAC causes improper authentication.

This vulnerability is handled as CVE-2026-35579. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.