unbound dnssec

  1. CVE-2026-33278 Unbound DNSSEC Flaw: Patch Unbound 1.25.1 Now

    NLnet Labs disclosed CVE-2026-33278 on May 20, 2026, as a critical Unbound DNSSEC validation flaw affecting versions 1.19.1 through 1.25.0, with denial of service and possible remote code execution fixed in Unbound 1.25.1. The short version is simple: if you operate a validating recursive...
  2. CVE-2026-42959: Unbound DNSSEC DoS Crash Fix (1.25.1) for Windows Networks

    CVE-2026-42959 is a denial-of-service vulnerability disclosed in May 2026 in NLnet Labs Unbound, where malicious upstream DNSSEC validation content can crash the resolver and interrupt DNS service for clients that depend on it. The practical story is not remote code execution or data theft; it...