ghost domain names

Ghost domain names refer to DNS records that continue to resolve even after they have been officially revoked or deleted. This tag covers discussions around the Unbound CVE-2026-40622 vulnerability, which affects DNS resolver versions 1.16.2 through 1.25.0 and can cause ghost domains to persist in cache under specific conditions. While not a Windows-specific flaw, the issue is relevant to Windows networks because DNS is a critical dependency for enterprise environments. Topics include cache correctness, DNS security, and the practical implications of revoked domains remaining accessible. The tag is useful for IT professionals managing DNS infrastructure and seeking to understand how to mitigate ghost domain risks.