This is not a zero day. The 0.0.0.0 bypass has been documented for a while now[1], including PNA bypass[2].

[1] https://github.com/nccgroup/singularity/wiki/Protection-Bypa...

[2] https://research.nccgroup.com/2023/04/27/state-of-dns-rebind...