CVE-2026-42955

NLnet Labs Unbound versions 1.16.2–1.25.1 are affected by CVE-2026-42955, a variant of CVE-2026-40622. An adversary controlling a ghost zone and able to query Unbound can cause the cache to overwrite expired parent-side glue A/AAAA records, extending the ghost domain window by up to one cached TT...

PT-2026-63373

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.16.2 through 1.25.1 Description An issue exists within the ghost domain names family of attacks where an adversary controlling a ghost zone can extend the ghost domain window for A/AAAA glue records. By sending a...