CVE-2026-46582

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the RRSIG validation and stored into cache, before later validation treats it as bogus based on NSEC validation. When the resolvin...

CVE-2026-13321

The BIND resolver accepts validly-signed NSEC records where the "Next...

Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled

...