CVE-2026-62309 | CoreDNS up to 1.14.3 Proxyproto Plugin proxyproto.go addr.String null pointer dereference

Inserito da Angelo Barbosa | Lug 16, 2026 | CVE

A vulnerability was found in CoreDNS up to 1.14.3 and classified as critical. Affected is the function addr.String of the file plugin/pkg/proxyproto/proxyproto.go of the component Proxyproto Plugin. Executing a manipulation can lead to null pointer dereference.

This vulnerability is tracked as CVE-2026-62309. The attack can be launched remotely. No exploit exists.

CVE-2026-62309 | CoreDNS up to 1.14.3 Proxyproto Plugin proxyproto.go addr.String null pointer dereference

Post correlati

CVE-2024-45785 | NEUMANNLTD MUSASI 3 client-side authentication

CVE-2024-55416 | DevDojo Voyager up to 1.8.0 /admin/compass cross site scripting

CVE-2025-1151 | GNU Binutils 2.43 ld xmemdup.c xmemdup memory leak

CVE-2024-26136 | kedi ElectronCord aaaeaf4e6c99893827b2eea4dd02f755e1e24041 on Discord Access Token config.json information disclosure (GHSA-ppwc-5vwp-mhw8)