unbound cve

The unbound cve tag covers security vulnerabilities in the Unbound DNS resolver, particularly CVE-2026-40622 disclosed by NLnet Labs. This medium-severity flaw affects Unbound versions 1.16.2 through 1.25.0, allowing revoked ghost domain names to persist in the resolver cache under specific attacker-controlled DNS conditions. While not a Microsoft Windows vulnerability, it is relevant to Windows networks because DNS is a critical dependency for enterprise control planes. The tag highlights how cache correctness impacts security, emphasizing that even after revocation, a supposedly dead domain can continue to resolve. Discussions focus on the practical implications for network administrators and the importance of updating to Unbound 1.25.1 to mitigate the issue.