edns security

  1. CVE-2026-41292: Unbound EDNS Option DoS Fix for Windows DNS Environments

    On May 20, 2026, NLnet Labs disclosed CVE-2026-41292, a remotely reachable denial-of-service vulnerability in Unbound versions up to and including 1.25.0, where DNS queries carrying unusually long EDNS option lists can consume resolver thread time and degrade or deny service. The fix arrived in...