CVE-2026-41637

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC DoQ queries are not accounted properly by Unbound resulting in low-cost inflation of the waiting number of replies for already in-flight resolution queries. This results in degradation of resolution service f...

CVE-2026-50252

In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When resolver load balancing policies depend on the source port while their outcome is revealed this secrecy is undermined...

unbound: Unbound: DNS cache poisoning via UDP source port predictability

A flaw in Unbound's SOREUSEPORT implementation reduces UDP source port entropy by allowing attackers to map ports to specific worker threads. This enables DNS cache poisoning, potentially leading to traffic redirection or unauthorized information disclosure...

CVE-2026-55990

creationtimestamp| type| source ---|---|--- 2026-07-22 14:14:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraj37lrg42g...

CVE-2026-50252

creationtimestamp| type| source ---|---|--- 2026-07-22 14:08:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraiqwpuvy2a 2026-08-30 13:22:20+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mucidnjg5c2o...

CVE-2026-56444

creationtimestamp| type| source ---|---|--- 2026-07-22 14:06:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraimgxtjj2j...

CVE-2026-44690

creationtimestamp| type| source ---|---|--- 2026-07-22 14:04:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraiickcyu2g...

CVE-2026-46582

creationtimestamp| type| source ---|---|--- 2026-07-22 13:57:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrai5iob722j...

CVE-2026-50248

creationtimestamp| type| source ---|---|--- 2026-07-22 13:56:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrai2d5azk2q...

CVE-2026-55991

creationtimestamp| type| source ---|---|--- 2026-07-22 13:52:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrahuibum52s...

CVE-2026-16318

creationtimestamp| type| source ---|---|--- 2026-07-22 13:13:59+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mrafotbn332r...

CVE-2026-14551

creationtimestamp| type| source ---|---|--- 2026-07-22 13:09:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrafgqig7b2q 2026-07-22 23:00:55+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116966113626723467 2026-07-22 23:00:55+00:00| seen|...

CVE-2026-54478

In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie SipHash is computed over the proxy's wire address instead of the PROXYv2-declared client. One server cookie obtained through a...

EUVD-2026-47676

In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When resolver load balancing policies depend on the source port while their outcome is revealed this secrecy is undermined...

CVE-2026-50252

In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When resolver load balancing policies depend on the source port while their outcome is revealed this secrecy is undermined...

CVE-2026-50252

In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, the UDP source port is used as a secrecy element to increase DNS transaction entropy. When SO_REUSEPORT is enabled (default) and load balancing depends on the source port and IP address, this secrecy can be undermined. On startup Unbound pa...

CVE-2026-50252 Possible cache poisoning attack by mapping source port population per thread

In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When resolver load balancing policies depend on the source port while their outcome is revealed this secrecy is undermined...

CVE-2026-50252

In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When resolver load balancing policies depend on the source port while their outcome is revealed this secrecy is undermined...

CVE-2026-65598

creationtimestamp| type| source ---|---|--- 2026-07-22 13:04:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraf5rtpf62i 2026-07-28 18:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrq2k4jcre22...

CVE-2026-65597

creationtimestamp| type| source ---|---|--- 2026-07-22 12:54:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraelut7k22e 2026-07-31 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrxkbab4su23...