[CVE-2026-35501 ] Published: Oct 21, 2026, 9:17:00 AM UTC
unbound: CVE-2026-35501
Low(3.7) Afetada Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.2-0+deb13u1
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.2-0+deb13u1
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.2-0+deb13u1
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.2-0+deb13u1
Version impact unknown
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
[CVE-2026-50106 ] Published: Oct 21, 2026, 9:17:00 AM UTC
unbound: CVE-2026-50106
Medium(6.5) Afetada Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.2-0+deb13u1
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.2-0+deb13u1
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.2-0+deb13u1
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.2-0+deb13u1
Version impact unknown
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
[CVE-2026-96405 ] Published: Oct 21, 2026, 9:17:00 AM UTC
unbound: CVE-2026-96405
Medium(5.3) Afetada Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.2-0+deb13u1
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.2-0+deb13u1
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.2-0+deb13u1
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.2-0+deb13u1
Version impact unknown
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
[CVE-2026-97206 ] Published: Oct 21, 2026, 9:17:00 AM UTC
unbound: CVE-2026-97206
High(7.5) Afetada Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.2-0+deb13u1
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.2-0+deb13u1
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.2-0+deb13u1
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.2-0+deb13u1
Version impact unknown
dsa · unbound · debian · bookworm; pypi · unbound · debian · 13
[CVE-2026-109125 ] Published: Oct 21, 2026, 9:17:00 AM UTC
unbound: CVE-2026-109125
Medium(5.3) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.2-0+deb13u1, 1.26.2-1
Version impact unknown
dsa · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.26.2-0+deb13u1, 1.26.2-1
Version impact unknown
dsa · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.2-0+deb13u1, 1.26.2-1
Version impact unknown
dsa · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.2-0+deb13u1, 1.26.2-1
Version impact unknown
dsa · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-77860 ] Published: Sep 15, 2026, 10:00:00 PM UTC
In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' counter per client IP essentially bypassing on
Low(3.7) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-77955 ] Published: Sep 15, 2026, 10:00:00 PM UTC
In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones (zonemd-check: yes) which are located below (but not at) a trust anchor allow for an attack window w
Medium(5.9) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-78227 ] Published: Sep 15, 2026, 10:00:00 PM UTC
NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC support with '--with-libngtcp2'. Each DoQ stream owns an output buffer that hol
High(8.1) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-80225 ] Published: Sep 15, 2026, 10:00:00 PM UTC
In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that
Medium(5.3) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-81634 ] Published: Sep 15, 2026, 10:00:00 PM UTC
In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by miss
High(8.1) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-81642 ] Published: Sep 15, 2026, 10:00:00 PM UTC
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs.
Critical(9.8) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-82717 ] Published: Sep 15, 2026, 10:00:00 PM UTC
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code ex
Critical(9.1) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-82720 ] Published: Sep 15, 2026, 10:00:00 PM UTC
NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths (i.e., RPZ drop que
Medium(5.9) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-85501 ] Published: Sep 15, 2026, 10:00:00 PM UTC
Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of service when malicious zones are used to serve the
Medium(5.3) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.26.1-0+deb13u1, 1.26.1-1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-56444 ] Published: Jul 22, 2026, 1:10:34 PM UTC
In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expired-client-timeout > discard-timeout > 0' (contrary to the suggested values
Medium(5.9) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-56416 ] Published: Jul 22, 2026, 1:10:24 PM UTC
In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset, it computes the address of the second embedded
Medium(5.6) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-55991 ] Published: Jul 22, 2026, 1:10:13 PM UTC
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion (if compiled with assertions on) and terminate the entire Unbound process usi
Medium(5.9) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-55990 ] Published: Jul 22, 2026, 1:10:01 PM UTC
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, Unbound fills only
Medium(5.9) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-55717 ] Published: Jul 22, 2026, 1:09:40 PM UTC
In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: <net> redirect' /'response-ip-data: <net> CNAME <target>' rule (or the RPZ 'rpz-
Medium(5.9) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
[CVE-2026-55708 ] Published: Jul 22, 2026, 1:09:30 PM UTC
In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and 'view_local_datas' commands of 'unbound-control' create a bare local zones tree for an already configured named view w
Low(3.7) Desconhecido Detalhes (4) 1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.22.0-2+deb13u3 · arm64 · trixie-security
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
1.26.2-0+deb13u1 · amd64 · trixie-security
Desconhecido · Corrigida: 1.25.2-1, 1.26.1-0+deb13u1
Version impact unknown
nvd · unbound · debian · bookworm; pypi · unbound · debian · 12; pypi · unbound · debian · 13; pypi · unbound · debian · 14
