CVE-2026-62309 | CoreDNS up to 1.14.3 Proxyproto Plugin proxyproto.go addr.String null pointer dereference

July 16, 2026 Yanac

A vulnerability was found in CoreDNS up to 1.14.3 and classified as critical. Affected is the function addr.String of the file plugin/pkg/proxyproto/proxyproto.go of the component Proxyproto Plugin. Executing a manipulation can lead to null pointer dereference.

This vulnerability is tracked as CVE-2026-62309. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More