NLnet Labs

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions3
First seenSep 16, 2026
Last mentioned20d ago

Timeline

3 articles · newest first

Unbound 1.26.2 fixes high-severity DoQ use-after-free

CVE-2026-97206 can cause a use-after-free during DoQ path migration on multi-threaded Unbound deployments.

oss-securityOct 21, 15:27 UTC · 20d agoVulnerabilityCVE-2026-972061

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

NLnet Labs patched a critical heap overflow (CVE-2026-81642) in Unbound's DNSSEC validator that a malicious DNS zone can trigger for possible RCE.

The Hacker NewsSep 17, 12:30 UTC · Sep 17, 2026VulnerabilityCVE-2026-81642 CVE-2026-82717 CVE-2026-81634+73 · 2 reads

Unbound: 1.26.1 addresses multiple CVE items

Unbound 1.26.1 fixes critical heap buffer overflow CVE-2026-81642 in DNSKEY digesting that may allow remote code execution.

oss-securitySep 16, 15:05 UTC · Sep 16, 2026VulnerabilityCVE-2026-816421 · 1 read

Related CVEs

by mentions

CVE-2026-81642<1%9.1
Heap buffer overflow in NLnet Labs Unbound DNSKEY digesting enables DoS and RCE
published Sep 16, 2026NLnet Labs UnboundPoC
CVE-2026-332781%9.1
NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote…
published May 20, 2026nlnetlabs unbound
CVE-2026-827178.4
Heap Buffer Overflow in NLnet Labs Unbound DNS Resolver May Lead to RCE
published Sep 16, 2026NLnet Labs Unbound
CVE-2026-816347.5
Heap Buffer Overflow in NLnet Labs Unbound DNS Resolver via Crafted DNS Responses
published Sep 16, 2026NLnet Labs Unbound
CVE-2026-802257.5
Unbounded-read DoS in NLnetLabs Unbound TCP/DoT lets one client stall a worker
published Sep 16, 2026NLnet Labs Unbound
CVE-2026-855017.5
Algorithmic Complexity DoS (ReTrap) in NLnet Labs Unbound DNSSEC Validation
published Sep 16, 2026NLnet Labs Unbound
CVE-2026-972067.5
Use-after-free crash in multi-threaded Unbound DoQ
published 20d agoNLnet Labs Unbound
CVE-2026-782276.5
Use-after-free in NLnet Labs Unbound DNS-over-QUIC (DoQ) enables remote crash
published Sep 16, 2026NLnet Labs Unbound (DNS-over-QUIC builds, compiled with --with-libngtcp2)
CVE-2026-827205.9
Use-After-Free in NLnet Labs Unbound DNS-over-HTTPS Can Crash Resolver
published Sep 16, 2026NLnet Labs Unbound
CVE-2026-778603.7
NLnetLabs Unbound serve-expired flaw bypasses DNSBomb wait-limit defense (DoS)
published Sep 16, 2026NLnet Labs Unbound

Appears with

Unboundproduct · 3
NLnet Labsorganization · 2
Nankai Universityorganization · 1
CISAorganization · 1
Debianvendor · 1
NVDorganization · 1
Anthropicorganization · 1

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned 20d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.