CVE-2026-85501

NLnet Labs Unbound up to and including 1.26.0 is vulnerable to a set of DNSSEC algorithmic complexity attacks collectively termed ReTrap . Four distinct vectors are identified: TagTrap (mismatched DNSKEY, RRSIG, and DS records in responses), DelegationTrap (iterative chain-of-trust validation fro...