Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how nlnetlabs compares to other vendors in security performance

View Risk Score →

Nlnet Labs UnboundDegradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration

Risk 37
Severity
5.9
First published (updated )
CVE-2026-56444

Nlnet Labs UnboundPossible heap buffer overflow when validator canonicalizes RDATA that contains domain name

Risk 34
Severity
4.8
First published (updated )
CVE-2026-56416

Nlnet Labs UnboundRemote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2

Risk 37
Severity
5.9
First published (updated )
CVE-2026-55991

Nlnet Labs UnboundPacket of death for a DNSCrypt misconfigured Unbound

Risk 37
Severity
5.9
First published (updated )
CVE-2026-55990

Nlnet Labs Unbound'dns-error-reporting: yes' leads to stack buffer overflow

Risk 46
Severity
7.5
First published (updated )
CVE-2026-55973
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs Unbound'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash

Risk 37
Severity
5.9
First published (updated )
CVE-2026-55717

Nlnet Labs UnboundPrivacy/configuration issue when adding local data in views through 'unbound-control'

Risk 23
Severity
3.1
First published (updated )
CVE-2026-55708

Nlnet Labs UnboundDNS Cookie bypass when combined with proxy-protocol use

Risk 21
Severity
3.7
First published (updated )
CVE-2026-54478

Nlnet Labs UnboundMemory corruption could lead to crash and denial of service

Risk 37
Severity
5.9
First published (updated )
CVE-2026-52863

Nlnet Labs UnboundPossible cache poisoning attack by mapping source port population per thread

Risk 71
Severity
5.7
First published (updated )
CVE-2026-50252
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs UnboundAttacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush

Risk 28
Severity
5.3
First published (updated )
CVE-2026-50251

Nlnet Labs UnboundBOGUS configured primary hostname accepted for XFR in auth/rpz zones

Risk 48
Severity
6.5
First published (updated )
CVE-2026-50248

Nlnet Labs Unbound'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL

Risk 30
Severity
6.3
First published (updated )
CVE-2026-50243

Nlnet Labs UnboundPossible heap use-after-free in an error path when a DoT forwarded query is jostled out

Risk 37
Severity
5.9
First published (updated )
CVE-2026-50046

Nlnet Labs Unbound'max-global-quota' reset by DNSSEC validation restarts

Risk 28
Severity
5.3
First published (updated )
CVE-2026-50045
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs UnboundA wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path

Risk 21
Severity
3.7
First published (updated )
CVE-2026-46582

Nlnet Labs UnboundCross-zone wildcard cache poisoning via RRSIG.labels manipulation

Risk 46
Severity
7.5
First published (updated )
CVE-2026-44690

Nlnet Labs UnboundOff-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN

Risk 21
Severity
3.7
First published (updated )
CVE-2026-44687

Nlnet Labs UnboundLibunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated

Risk 37
Severity
5.9
First published (updated )
CVE-2026-44621

Nlnet Labs UnboundExtra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records

Risk 21
Severity
3.7
First published (updated )
CVE-2026-42955
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs UnboundDegradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries

Risk 21
Severity
3.7
First published (updated )
CVE-2026-41637

Nlnet Labs UnboundPacket of death for DNSCrypt over TCP

Risk 46
Severity
7.5
First published (updated )
CVE-2026-40691

Nlnet Labs UnboundRemote DNS-over-QUIC denial of service due to `quic-size` budget bypass

Risk 46
Severity
7.5
First published (updated )
CVE-2026-32665

Unbound DNSBypass of client certificate verification with transfer over TLS

Risk 45
Severity
8.2
First published (updated )
CVE-2026-12490

NSD NSDOut of bounds stack write with crafted APL RR

Risk 62
Severity
7.2
First published (updated )
CVE-2026-12246
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs NSDDenial of DNS over TLS service by any DoT client

Risk 49
Severity
8.7
First published (updated )
CVE-2026-12245

NSDHeap overflow and crash with crafted SVCB RR

Risk 82
Severity
8.7
First published (updated )
CVE-2026-12244

Nlnet Labs ldnsInsufficient verification that responses belong to a query

Risk 46
Severity
8.2
First published (updated )
CVE-2026-10846

Nlnet Labs RoutinatorRoutinator crashes on specifically crafted RRDP XML files

Risk 47
Severity
8.7
First published (updated )
CVE-2026-49235

Nlnet Labs RoutinatorRoutinator crashes on specifically crafted ASN strings in the API

Risk 43
Severity
8.2
First published (updated )
CVE-2026-49234
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203