CVE-2026-109140: NLnet Labs Krill: The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0…

The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0 on every Krill restart, so the same key, nonce pair is used again after each restart...

CVE-2026-109141: NLnet Labs Krill: The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every…

The vulnerability gives a role that is restricted to a list of CAs cas = ... its full permission set for every request that is not tied to a CA, including the bulk import endpoint POST /api/v1/bulk/cas/import. It adds a new child CA under any existing CA, gives the child any of that CA's resource...

CVE-2026-109142: NLnet Labs Krill: When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it runs the…

When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it runs the RFC 6492 provisioning exchange in-process and trusts the child identity childhandle that the caller put in the parent contact. Nothing checks that this child identity actually...

nsd

NSD The NLnet Labs Name Server Daemon NSD is an authoritative DNS name server. It has been developed for operations in environments where speed, reliability, stability and security are of high importance. If you have any feedback, we would love to hear from you. Don’t hesitate to create an issue ...

CLEANSTART-2024-WF41202 NLnet Labs Unbound, up to and including version 1

Security vulnerability affects the nsd package. NLnet Labs Unbound, up to and including version 1...

CLEANSTART-2026-ZL28860 NLnet Labs Unbound, up to and including version 1

Security vulnerability affects the unbound package. NLnet Labs Unbound, up to and including version 1...

CLEANSTART-2026-KQ38541 NLnet Labs Unbound, up to and including version 1

Security vulnerability affects the unbound package. NLnet Labs Unbound, up to and including version 1...

CLEANSTART-2026-YS90926 NLnet Labs Unbound version 1

Security vulnerability affects the unbound package. NLnet Labs Unbound version 1...

NLnet Labs Routinator improper exception handling vulnerability

Versions of NLnet Labs Routinator prior to 0.15.3 contain an improper exception handling vulnerability. This flaw arises because incremental entries with gaps in RRDP notification files are still accepted and parsed, potentially leading to data loss. In cases where there are numerous such...

NLnet Labs Routinator improper exception handling vulnerability

Versions of NLnet Labs Routinator prior to 0.15.3 contain an improper exception handling vulnerability. This vulnerability arises when obtaining files via RRDP; the rsync URI includes paths that cannot be stored on disk—such as overly long filenames or folder names that overlap with existing...

NLnet Labs Routinator improper exception handling vulnerability

Versions of NLnet Labs Routinator prior to 0.15.3 contain an improper exception handling vulnerability. This vulnerability arises when multiple concurrent JSON requests exhaust memory; attackers can exploit it by opening numerous HTTP server connections maliciously. Additionally, a stack overflow...

NLnet Labs Routinator improper exception handling vulnerability

Versions of NLnet Labs Routinator prior to 0.15.3 contain an improper exception handling vulnerability. This vulnerability arises when the HTTP server exhausts its open connections after receiving a large number of connections without closing them, rendering the HTTP server unavailable and...

NLnet Labs Routinator improper exception handling vulnerability

The NLnet Labs Routinator has a vulnerability related to improper exception handling. This vulnerability may cause it to hang or exhaust memory when processing CRLs containing a large number of entries; it may also exit if encountering a malformed CRL file...

NLnet Labs Routinator improper exception handling vulnerability

The NLnet Labs Routinator has a vulnerability related to improper exception handling. This occurs because the maximum value during AS range parsing is less than the minimum value, resulting in an inability to reach the maximum value and memory exhaustion...

CentOS Linux 7 [TuxCare] Security Update: unbound / unbound-devel / unbound-libs / unbound-python Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792811393)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792811393 advisory. - In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with...

NLnet Labs Routinator improper exception handling vulnerability

Versions prior to NLnet Labs Routinator 0.15.3 contain an improper exception handling vulnerability. This vulnerability arises because newly obtained TA certificates obtained via HTTPS are stored in cache without verification; as a result, even if verification fails, known valid TA certificates m...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Heap-based Buffer Overflow in NLnet Labs Unbound (CVE-2026-81642, CVE-2026-81634, CVE-2026-82717)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Heap-based Buffer Overflow in NLnet Labs Unbound that could result in remote code execution and DOS conditions. NLnet Labs Unbound is used as part of our Speech microservices. These vulnerabilities have been addressed. Please read th...

AZL-109824 CVE-2026-97206 affecting package unbound for versions less than 1.26.2-1

NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC DoQ lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter stream/connection cleanup while a mesh reply still retains a pointer to the Do...

DEBIAN-CVE-2026-109125

In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold 0' configurations not a default configuration. If a response-like UDP datagram reaches the upstream source port currently used by a recursive query, but i...

CVE-2026-50106

When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent is provably insecure under the root chain, a malicious actor who can deliver one forged NXDOMAIN response for a name...