What’s Vulnerable › Products
NLnet Labs Unbound vulnerabilities
81 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 51 published in the last 12 months.
Check whether your NLnet Labs Unbound version is affected
Latest NLnet Labs Unbound vulnerabilities
- CVE-2026-97206 — DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments. (CVSS 7.5)
- CVE-2026-96405 — Aggregate DNS name chained pointer decompression work leads to degradation of service. (CVSS 5.3)
- CVE-2026-50106 — Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent. (CVSS 6.5)
- CVE-2026-35501 — Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record. (CVSS 3.7)
- CVE-2026-109125 — Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold' (CVSS 5.3)
- CVE-2026-85501 — Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (CVSS 7.5)
- CVE-2026-82720 — Use-after-free in DoH stream cleanup code path (CVSS 5.9)
- CVE-2026-82717 — CNAME synthesis could lead to heap corruption (CVSS 9.8)
- CVE-2026-81642 — Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (CVSS 9.8)
- CVE-2026-81634 — Possible heap buffer overflow during DNSSEC canonicalization (CVSS 7.5)
- CVE-2026-80225 — Possible degradation of service from continuous queries on the same TCP/DoT connection (CVSS 7.5)
- CVE-2026-78227 — Use-after-free in DoQ stream output buffer on reset re-transmission (CVSS 6.5)
- CVE-2026-77955 — Possible ZONEMD verification bypass window (CVSS 4.4)
- CVE-2026-77860 — 'serve-expired' can bypass Unbound 'wait-limit' (CVSS 3.7)
- CVE-2026-56444 — Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration (CVSS 5.9)
- CVE-2026-56416 — Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name (CVSS 4.8)
- CVE-2026-55991 — Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 (CVSS 5.9)
- CVE-2026-55990 — Packet of death for a DNSCrypt misconfigured Unbound (CVSS 5.9)
- CVE-2026-55973 — 'dns-error-reporting: yes' leads to stack buffer overflow (CVSS 7.5)
- CVE-2026-55717 — 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash (CVSS 5.9)
- CVE-2026-55708 — Privacy/configuration issue when adding local data in views through 'unbound-control' (CVSS 3.1)
- CVE-2026-54478 — DNS Cookie bypass when combined with proxy-protocol use (CVSS 3.7)
- CVE-2026-52863 — Memory corruption could lead to crash and denial of service (CVSS 5.9)
- CVE-2026-50252 — Possible cache poisoning attack by mapping source port population per thread (CVSS 9.3)
- CVE-2026-50251 — Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush (CVSS 5.3)