NLnet Labs disclosed CVE-2026-42944 on May 20, 2026, as a high-severity Unbound DNS resolver vulnerability affecting versions 1.14.0 through 1.25.0, where crafted queries containing multiple NSID, DNS Cookie, and EDNS Padding options can trigger a heap overflow and crash the service. The fix is...