CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,468 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,468
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product nlnetlabs:unbound. Show all products

44 CVEs, showing 1 to 44
CVESeverityTitlePublished
CVE-2019-16866High 7.5Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query.
Assigned by mitre
Oct 3, 2019
CVE-2026-32792Medium 5.3NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support ('--enable-dnscrypt').May 20, 2026
CVE-2026-33278Critical 9.8NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a result of deep copying…May 20, 2026
CVE-2026-40622High 7.5NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain window by up to one cached TTL config…May 20, 2026
CVE-2026-41292High 7.5NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options.May 20, 2026
CVE-2026-42534Medium 5.3NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its purpose and degrade resolution performance.May 20, 2026
CVE-2026-42923Medium 5.3NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negative cache for DS records does not take into account the limit…May 20, 2026
CVE-2026-42944High 7.5NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the re…May 20, 2026
CVE-2026-42959High 7.5NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies.May 20, 2026
CVE-2026-42960Critical 10.0NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section.May 20, 2026
CVE-2026-44390Medium 5.3NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for.May 20, 2026
CVE-2026-44608Medium 5.9NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-threaded, RPZ XFR reload, RPZ zone with 'rpz-nsip'/'…May 20, 2026
CVE-2026-32665High 7.5In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enabled, the first two bidirectional streams on a new QUIC connection (stream_id 0 and 4) bypass the pe…Jul 22, 2026
CVE-2026-40691High 7.5In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply length against the destination buffer si…Jul 22, 2026
CVE-2026-41637Low 3.7In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC (DoQ) queries are not accounted properly by Unbound resulting in low-cost inflation of the waiting number of r…Jul 22, 2026
CVE-2026-42955Low 3.7In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found in Unbound that could extend the ghost…Jul 22, 2026
CVE-2026-44621Medium 5.9With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and configured with 'unwanted-reply-threshold', could eventually be abruptly terminated if the threshold is r…Jul 22, 2026
CVE-2026-44687Low 3.7In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is below an intermediate labed below a DNSSEC signed zone could be shadowed by the intermediate label's s…Jul 22, 2026
CVE-2026-44690High 7.5In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cach…Jul 22, 2026
CVE-2026-46582Low 3.7In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the RRSIG validation and stored…Jul 22, 2026
CVE-2026-50045Medium 5.3In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to send more upstream packets per client query t…Jul 22, 2026
CVE-2026-50046Medium 5.9In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS (DoT) forwarded queries is tied to a struct's ('serviced_query') lifetime but also referenced by ano…Jul 22, 2026
CVE-2026-50243Low 3.7In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front of the validator together with a 'response-ip' redirect rule or an RPZ file with a…Jul 22, 2026
CVE-2026-50248Medium 6.5In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured primary hostname that resolves to BOGUS A/AAAA, it is still considered as a possible XFR endpoint.Jul 22, 2026
CVE-2026-50251Medium 5.3In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled (set to any value greater than zero), glue records of 0.0.0.0/::0 can short-circuit Unbound, on sy…Jul 22, 2026
CVE-2026-50252Critical 9.3In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions.Jul 22, 2026
CVE-2026-52863Medium 5.9In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, creates a shallow copy of the view name in effect that could lead to memory c…Jul 22, 2026
CVE-2026-54478Low 3.7In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie SipHash is computed over the p…Jul 22, 2026
CVE-2026-55708Low 3.1In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and 'view_local_datas' commands of 'unbound-control' create a bare local zones tree for an already configured named view…Jul 22, 2026
CVE-2026-55717Medium 5.9In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: <net> redirect' /'response-ip-data: <net> CNAME <target>' rule (or the RPZ 'rpz…Jul 22, 2026
CVE-2026-55973High 7.5In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option (code 18) from the last upstream response is read and uses the option's…Jul 22, 2026
CVE-2026-55990Medium 5.9In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, Unbound fills only…Jul 22, 2026
CVE-2026-55991Medium 5.9In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion (if compiled with assertions on) and terminate the entire Unbound process us…Jul 22, 2026
CVE-2026-56416Medium 4.8In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset, it computes the address of the second embedded…Jul 22, 2026
CVE-2026-56444Medium 5.9In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expired-client-timeout > discard-timeout > 0' (contrary to the suggested value…Jul 22, 2026
CVE-2026-77860Low 3.7'serve-expired' can bypass Unbound 'wait-limit'
Assigned by NLnet Labs
Sep 16, 2026
CVE-2026-77955Medium 4.4Possible ZONEMD verification bypass window
Assigned by NLnet Labs
Sep 16, 2026
CVE-2026-78227Medium 6.5Use-after-free in DoQ stream output buffer on reset re-transmission
Assigned by NLnet Labs
Sep 16, 2026
CVE-2026-80225Medium 5.3Possible degradation of service from continuous queries on the same TCP/DoT connection
Assigned by NLnet Labs
Sep 16, 2026
CVE-2026-81634High 7.5Possible heap buffer overflow during DNSSEC canonicalization
Assigned by NLnet Labs
Sep 16, 2026
CVE-2026-81642Critical 9.1Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
Assigned by NLnet Labs
Sep 16, 2026
CVE-2026-82717High 8.4CNAME synthesis could lead to heap corruption
Assigned by NLnet Labs
Sep 16, 2026
CVE-2026-82720Medium 5.9Use-after-free in DoH stream cleanup code path
Assigned by NLnet Labs
Sep 16, 2026
CVE-2026-85501Medium 5.3Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC
Assigned by NLnet Labs
Sep 16, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.