CVE-2026-42923 is a medium-severity DNSSEC validation flaw disclosed in May 2026 affecting NLnet Labs Unbound through version 1.25.0, where specially crafted NSEC3 records can force excessive hash calculations and degrade resolver availability over the network. It is not the sort of bug that...
CVE-2026-42960 is a high-severity DNS cache-poisoning flaw in NLnet Labs Unbound through version 1.25.0, disclosed in May 2026 and patched in Unbound 1.25.1, with Microsoft’s Security Update Guide mirroring the advisory for environments that consume the resolver through Microsoft-managed or...