NLnet Labs Unbound

Latest vulnerabilities

• CVE-2026-85501 CVSS 7.5 high Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in…
• CVE-2026-82720 CVSS 5.9 medium NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with…
• CVE-2026-82717 CVSS 8.4 high In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under…
• CVE-2026-81642 CVSS 9.1 critical In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and…
• CVE-2026-81634 CVSS 7.5 high In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow…
• CVE-2026-80225 CVSS 7.5 high In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where…
• CVE-2026-78227 CVSS 6.5 medium NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC support with…
• CVE-2026-77955 CVSS 4.4 medium In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones (zonemd-check: yes) which are located…
• CVE-2026-77860 CVSS 3.7 low In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on…
• CVE-2026-44690 CVSS 7.5 high In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache…
• CVE-2026-33278 CVSS 9.1 critical NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service…