UN
Product
Unbound
51
CVEs
0
On KEV
10.0
Max CVSS
5
New 30D
Severity mix
Critical 5High 12Medium 25Low 9
Watch
Add Unbound to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42960 | 10.0 | May 20 | Possible cache poisoning via promiscuous records for the authority section Affected: before 1.25.1 |
| CVE-2026-82717 | 9.8 | Sep 16 | CNAME synthesis could lead to heap corruption Affected: before 1.26.1 |
| CVE-2026-81642 | 9.8 | Sep 16 | Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY Affected: before 1.26.1 |
| CVE-2026-33278 | 9.8 | May 20 | Possible arbitrary code execution during DNSSEC validation Affected: 1.19.1 before 1.25.1 |
| CVE-2026-50252 | 9.3 | Jul 22 | Possible cache poisoning attack by mapping source port population per thread Affected: 1.4.22 before 1.25.2 |
Showing 5