Login Request a demo
NL
Vendor
NLnet Labs
5 products with CVEs on record
76
CVEs
0
On KEV
16
New 30D
Products
UN
Unbound
NLnet Labs
10.0
51 CVEs0 on KEV5 new
RO
Routinator
NLnet Labs
8.7
11 CVEs0 on KEV7 new
NS
NSD
NLnet Labs
9.1
12 CVEs0 on KEV4 new
LD
ldns
NLnet Labs
7.5
1 CVEs0 on KEV0 new
ND
Net Dns
Nlnet Labs
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-72758
New
RO
Routinator
NLnet Labs
7.5
0%
Oct 26Routinator may exit on malformed ranges
CVE-2026-72757
New
RO
Routinator
NLnet Labs
5.3
0%
Oct 26Routinator HTTP server becomes unavailable with many unclosed connections
CVE-2026-72756
New
RO
Routinator
NLnet Labs
7.5
0%
Oct 26Routinator exits on malformed rsync URIs
CVE-2026-72755
New
RO
Routinator
NLnet Labs
3.8
0%
Oct 26Routinator stores TA certificate in cache without validation
CVE-2026-72754
New
RO
Routinator
NLnet Labs
7.5
0%
Oct 26Routinator exits when parsing an incorrect or very large CRL file
CVE-2026-72753
New
RO
Routinator
NLnet Labs
8.2
0%
Oct 26Routinator incorrectly handles delta updates
CVE-2026-72752
New
RO
Routinator
NLnet Labs
6.5
0%
Oct 26Routinator exits when requesting the output repeatedly
CVE-2026-97206
UN
Unbound
NLnet Labs
7.5
0%
Oct 21DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.
CVE-2026-96405
UN
Unbound
NLnet Labs
5.3
0%
Oct 21Aggregate DNS name chained pointer decompression work leads to degradation of service.
CVE-2026-50106
UN
Unbound
NLnet Labs
6.5
0%
Oct 21Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.
CVE-2026-35501
UN
Unbound
NLnet Labs
3.7
0%
Oct 21Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.
CVE-2026-109125
UN
Unbound
NLnet Labs
5.3
0%
Oct 21Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'
CVE-2026-101341
NS
NSD
NLnet Labs
8.7
0%
Oct 14Stack overwrite from specially formatted TXT-DATA RDATA field
CVE-2026-101339
NS
NSD
NLnet Labs
8.7
0%
Oct 14Stack overwrite from a specially crafted and formatted HIP RR
CVE-2026-101338
NS
NSD
NLnet Labs
8.7
0%
Oct 14Stack overwrite from a specially crafted and formatted SVCB or HTTPS RR
CVE-2026-101337
NS
NSD
NLnet Labs
8.7
0%
Oct 14Stack overwrite from specially formatted base64 RDATA field
CVE-2026-85501
UN
Unbound
NLnet Labs
7.5
0%
Sep 16Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC
CVE-2026-82720
UN
Unbound
NLnet Labs
5.9
0%
Sep 16Use-after-free in DoH stream cleanup code path
CVE-2026-82717
UN
Unbound
NLnet Labs
9.8
1%
Sep 16CNAME synthesis could lead to heap corruption
CVE-2026-81642
UN
Unbound
NLnet Labs
9.8
1%
Sep 16Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
CVE-2026-81634
UN
Unbound
NLnet Labs
7.5
0%
Sep 16Possible heap buffer overflow during DNSSEC canonicalization
CVE-2026-80225
UN
Unbound
NLnet Labs
7.5
0%
Sep 16Possible degradation of service from continuous queries on the same TCP/DoT connection
CVE-2026-78227
UN
Unbound
NLnet Labs
6.5
0%
Sep 16Use-after-free in DoQ stream output buffer on reset re-transmission
CVE-2026-77955
UN
Unbound
NLnet Labs
4.4
0%
Sep 16Possible ZONEMD verification bypass window
CVE-2026-77860
UN
Unbound
NLnet Labs
3.7
0%
Sep 16'serve-expired' can bypass Unbound 'wait-limit'
CVE-2026-19538
NS
NSD
NLnet Labs
7.5
0%
Aug 26Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
CVE-2026-19401
NS
NSD
NLnet Labs
7.5
0%
Aug 26Remote UDP DoS by sending multiple DNS Cookie options
CVE-2026-18916
NS
NSD
NLnet Labs
7.5
0%
Aug 26Remote TCP DoS by throttling the TCP receive window
CVE-2026-18664
NS
NSD
NLnet Labs
9.1
0%
Aug 26Wrong interpretation of ACL ranges
CVE-2026-56444
UN
Unbound
NLnet Labs
5.9
0%
Jul 22Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration
CVE-2026-56416
UN
Unbound
NLnet Labs
4.8
0%
Jul 22Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name
CVE-2026-55991
UN
Unbound
NLnet Labs
5.9
0%
Jul 22Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
CVE-2026-55990
UN
Unbound
NLnet Labs
5.9
0%
Jul 22Packet of death for a DNSCrypt misconfigured Unbound
CVE-2026-55973
UN
Unbound
NLnet Labs
7.5
0%
Jul 22'dns-error-reporting: yes' leads to stack buffer overflow
CVE-2026-55717
UN
Unbound
NLnet Labs
5.9
0%
Jul 22'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash
CVE-2026-55708
UN
Unbound
NLnet Labs
3.1
0%
Jul 22Privacy/configuration issue when adding local data in views through 'unbound-control'
CVE-2026-54478
UN
Unbound
NLnet Labs
3.7
0%
Jul 22DNS Cookie bypass when combined with proxy-protocol use
CVE-2026-52863
UN
Unbound
NLnet Labs
5.9
0%
Jul 22Memory corruption could lead to crash and denial of service
CVE-2026-50252
UN
Unbound
NLnet Labs
9.3
0%
Jul 22Possible cache poisoning attack by mapping source port population per thread
CVE-2026-50251
UN
Unbound
NLnet Labs
5.3
0%
Jul 22Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush
CVE-2026-50248
UN
Unbound
NLnet Labs
6.5
0%
Jul 22BOGUS configured primary hostname accepted for XFR in auth/rpz zones
CVE-2026-50243
UN
Unbound
NLnet Labs
3.7
0%
Jul 22'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL
CVE-2026-50046
UN
Unbound
NLnet Labs
5.9
0%
Jul 22Possible heap use-after-free in an error path when a DoT forwarded query is jostled out
CVE-2026-50045
UN
Unbound
NLnet Labs
5.3
0%
Jul 22'max-global-quota' reset by DNSSEC validation restarts
CVE-2026-46582
UN
Unbound
NLnet Labs
3.7
0%
Jul 22A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path
CVE-2026-44690
UN
Unbound
NLnet Labs
7.5
0%
Jul 22Cross-zone wildcard cache poisoning via RRSIG.labels manipulation
CVE-2026-44687
UN
Unbound
NLnet Labs
3.7
0%
Jul 22Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN
CVE-2026-44621
UN
Unbound
NLnet Labs
5.9
0%
Jul 22Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated
CVE-2026-42955
UN
Unbound
NLnet Labs
3.7
0%
Jul 22Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records
CVE-2026-41637
UN
Unbound
NLnet Labs
3.7
0%
Jul 22Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries
CVE-2026-40691
UN
Unbound
NLnet Labs
7.5
0%
Jul 22Packet of death for DNSCrypt over TCP
CVE-2026-32665
UN
Unbound
NLnet Labs
7.5
0%
Jul 22Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass
CVE-2026-14586
UN
Unbound
NLnet Labs
5.9
0%
Jul 22Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments
CVE-2026-12490
NS
NSD
NLnet Labs
7.5
0%
Jun 25Bypass of client certificate verification with transfer over TLS
CVE-2026-12246
NS
NSD
NLnet Labs
8.1
0%
Jun 25Out of bounds stack write with crafted APL RR
CVE-2026-12245
NS
NSD
NLnet Labs
7.5
0%
Jun 25Denial of DNS over TLS service by any DoT client
CVE-2026-12244
NS
NSD
NLnet Labs
8.8
0%
Jun 25Heap overflow and crash with crafted SVCB RR
CVE-2026-10846
LD
ldns
NLnet Labs
7.5
0%
Jun 10Insufficient verification that responses belong to a query
CVE-2026-49235
RO
Routinator
NLnet Labs
7.5
0%
Jun 8Routinator crashes on specifically crafted RRDP XML files
CVE-2026-49234
RO
Routinator
NLnet Labs
7.5
0%
Jun 8Routinator crashes on specifically crafted ASN strings in the API