| CVE-2026-97206 |
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable…
|
7.5
High
|
Oct 21, 2026 |
| CVE-2026-96405 |
NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual…
|
5.3
Medium
|
Oct 21, 2026 |
| CVE-2026-50106 |
When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional…
|
6.5
Medium
|
Oct 21, 2026 |
| CVE-2026-35501 |
When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an…
|
3.7
Low
|
Oct 21, 2026 |
| CVE-2026-109125 |
In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with…
|
5.3
Medium
|
Oct 21, 2026 |
| CVE-2026-85501 |
Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'
|
5.3
Medium
|
Sep 16, 2026 |
| CVE-2026-82720 |
NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs…
|
5.9
Medium
|
Sep 16, 2026 |
| CVE-2026-82717 |
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap…
|
8.4
High
|
Sep 16, 2026 |
| CVE-2026-81642 |
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables…
|
9.1
Critical
|
Sep 16, 2026 |
| CVE-2026-81634 |
In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap…
|
7.5
High
|
Sep 16, 2026 |
| CVE-2026-80225 |
In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT…
|
5.3
Medium
|
Sep 16, 2026 |
| CVE-2026-78227 |
NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC…
|
6.5
Medium
|
Sep 16, 2026 |
| CVE-2026-77955 |
In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones (zonemd-check:…
|
4.4
Medium
|
Sep 16, 2026 |
| CVE-2026-77860 |
In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a…
|
3.7
Low
|
Sep 16, 2026 |
| CVE-2026-56444 |
In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and…
|
5.9
Medium
|
Jul 22, 2026 |
| CVE-2026-56416 |
In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an…
|
4.8
Medium
|
Jul 22, 2026 |
| CVE-2026-55991 |
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2…
|
5.9
Medium
|
Jul 22, 2026 |
| CVE-2026-55990 |
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:'…
|
5.9
Medium
|
Jul 22, 2026 |
| CVE-2026-55973 |
In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel…
|
7.5
High
|
Jul 22, 2026 |
| CVE-2026-55717 |
In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip:…
|
5.9
Medium
|
Jul 22, 2026 |
| CVE-2026-55708 |
In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and 'view_local_datas' commands of…
|
3.1
Low
|
Jul 22, 2026 |
| CVE-2026-54478 |
In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface…
|
3.7
Low
|
Jul 22, 2026 |
| CVE-2026-52863 |
In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work…
|
5.9
Medium
|
Jul 22, 2026 |
| CVE-2026-50252 |
In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret…
|
5.7
Medium
|
Jul 22, 2026 |
| CVE-2026-50251 |
In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled (set to any value…
|
5.3
Medium
|
Jul 22, 2026 |