EUVD-2026-47713

The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1...

CVE-2026-12617

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

CVE-2026-12617

CVE-2026-12617 affects ISC BIND 9: vulnerable in 9.18.0–9.18.50 and 9.20.0–9.20.24 (including 9.18.11-S1–9.18.50-S1 and 9.20.9-S1–9.20.24-S1). The issue causes named to quit unexpectedly when handling responses for CNAME/DNAME and A records under certain query/order scenarios, potentially leading...

CVE-2026-48029

CVE-2026-48029 affects libheif: heap OOB read in ImageItem_Grid::decode_grid_tile due to irot-induced tile-coordinate underflow. Affected versions are 1.19.0–1.21.2; fixed in 1.22.0. Several connected advisories (NVD, Debian, Ubuntu, Amazon Linux, OSV, etc.) cite this along with related issues. R...

EUVD-2026-47707

The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...

MINI-F94Q-VQ23-J37F

Bulletin has no description...

MINI-R6QG-8RVW-787X

Bulletin has no description...

MINI-87P3-7PP5-7W6V

Bulletin has no description...

MINI-C2M4-7M47-3VFF

Bulletin has no description...

MINI-RHQP-HH88-W9F5

Bulletin has no description...

MINI-64P9-6559-7376

Bulletin has no description...

MINI-659J-PX9H-J448

Bulletin has no description...

CVE-2026-55991

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion if compiled with assertions on and terminate the entire Unbound process using a single DNS-over-QUIC DoQ connection and one normal DNS query. This is caused by an erroneous...

CVE-2026-55708 Privacy/configuration issue when adding local data in views through 'unbound-control'

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the contro...

CVE-2026-55708

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the contro...

CVE-2026-55708

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the contro...

CVE-2026-50251

This entry describes a vulnerability in NLnet Labs Unbound (≤ 1.25.1) where enabling unwanted-reply-threshold (>0) allows a malicious delegation returning in-bailiwick glue 0.0.0.0/::0 to cause repeated, seemingly unwanted replies. The mismatch between 0.0.0.0/::0 and the local 127.0.0.1 persp...

CVE-2026-50251

In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled set to any value greater than zero, glue records of 0.0.0.0/::0 can short-circuit Unbound, on systems that can direct such traffic, by issuing DNS queries and receiving seemingly unwanted replies...

CVE-2026-44687

CVE-2026-44687 affects NLnet Labs Unbound releases 1.13.2 through 1.25.1. A bug in the default tallied logic for hardened-below-nxdomain can cause a stub or forward zone to be shadowed by a DNSSEC-secure NXDOMAIN answer at the parent when the query name is an intermediate label below a signed zon...

CVE-2026-44621

With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and configured with 'unwanted-reply-threshold', could eventually be abruptly terminated if the threshold is reached and libunbound needs to call 'libworkeralloccleanup' since the function is absent from the...