Where
-Infinity
0

Trending

Last week
Last month
Last year

Nlnet Labs UnboundDegradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration

Risk 37
Severity
5.9
First published (updated )
CVE-2026-56444

Nlnet Labs UnboundPossible heap buffer overflow when validator canonicalizes RDATA that contains domain name

Risk 34
Severity
4.8
First published (updated )
CVE-2026-56416

Nlnet Labs UnboundRemote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2

Risk 37
Severity
5.9
First published (updated )
CVE-2026-55991

Nlnet Labs UnboundPacket of death for a DNSCrypt misconfigured Unbound

Risk 37
Severity
5.9
First published (updated )
CVE-2026-55990

Nlnet Labs Unbound'dns-error-reporting: yes' leads to stack buffer overflow

Risk 46
Severity
7.5
First published (updated )
CVE-2026-55973
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs Unbound'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash

Risk 37
Severity
5.9
First published (updated )
CVE-2026-55717

Nlnet Labs UnboundPrivacy/configuration issue when adding local data in views through 'unbound-control'

Risk 23
Severity
3.1
First published (updated )
CVE-2026-55708

Nlnet Labs UnboundDNS Cookie bypass when combined with proxy-protocol use

Risk 21
Severity
3.7
First published (updated )
CVE-2026-54478

Nlnet Labs UnboundMemory corruption could lead to crash and denial of service

Risk 37
Severity
5.9
First published (updated )
CVE-2026-52863

Nlnet Labs UnboundPossible cache poisoning attack by mapping source port population per thread

Risk 71
Severity
5.7
First published (updated )
CVE-2026-50252
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs UnboundAttacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush

Risk 28
Severity
5.3
First published (updated )
CVE-2026-50251

Nlnet Labs UnboundBOGUS configured primary hostname accepted for XFR in auth/rpz zones

Risk 48
Severity
6.5
First published (updated )
CVE-2026-50248

Nlnet Labs Unbound'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL

Risk 30
Severity
6.3
First published (updated )
CVE-2026-50243

Nlnet Labs UnboundPossible heap use-after-free in an error path when a DoT forwarded query is jostled out

Risk 37
Severity
5.9
First published (updated )
CVE-2026-50046

Nlnet Labs Unbound'max-global-quota' reset by DNSSEC validation restarts

Risk 28
Severity
5.3
First published (updated )
CVE-2026-50045
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs UnboundA wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path

Risk 21
Severity
3.7
First published (updated )
CVE-2026-46582

Nlnet Labs UnboundCross-zone wildcard cache poisoning via RRSIG.labels manipulation

Risk 46
Severity
7.5
First published (updated )
CVE-2026-44690

Nlnet Labs UnboundOff-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN

Risk 21
Severity
3.7
First published (updated )
CVE-2026-44687

Nlnet Labs UnboundLibunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated

Risk 37
Severity
5.9
First published (updated )
CVE-2026-44621

Nlnet Labs UnboundExtra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records

Risk 21
Severity
3.7
First published (updated )
CVE-2026-42955
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs UnboundDegradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries

Risk 21
Severity
3.7
First published (updated )
CVE-2026-41637

Nlnet Labs UnboundPacket of death for DNSCrypt over TCP

Risk 46
Severity
7.5
First published (updated )
CVE-2026-40691

Nlnet Labs UnboundRemote DNS-over-QUIC denial of service due to `quic-size` budget bypass

Risk 46
Severity
7.5
First published (updated )
CVE-2026-32665

Nlnet Labs UnboundUse after free and crash under special conditions in RPZ code

Risk 37
Severity
4.6
First published (updated )
CVE-2026-44608

Nlnet Labs UnboundUnbounded name compression in certain cases causes degradation of service

Risk 46
Severity
6.9
First published (updated )
CVE-2026-44390
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs UnboundPossible cache poisoning via promiscuous records for the authority section

Risk 76
Severity
5.7
First published (updated )
CVE-2026-42960

Nlnet Labs UnboundDegradation of service with unbounded NSEC3 hash calculations

Risk 34
Severity
6.9
First published (updated )
CVE-2026-42923

Nlnet Labs UnboundJostle logic bypass degrades resolution performance

Risk 46
Severity
6.9
First published (updated )
CVE-2026-42534

Nlnet Labs UnboundLong list of incoming EDNS options degrades performance

Risk 46
Severity
6.6
First published (updated )
CVE-2026-41292

Nlnet Labs UnboundAnother 'ghost domain names' attack variant

Risk 46
Severity
6.6
First published (updated )
CVE-2026-40622
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203