Unbound
This hub aggregates every CVE we track for Unbound, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
83
CVEs tracked
12
Critical
27
High
0
In CISA KEV
Severity distribution
MEDIUM35HIGH27CRITICAL12LOW9
Monthly trend
1
0
0
0
0
0
0
0
0
1
0
0
1
0
0
0
0
0
0
11
0
24
0
9
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Unbound.
- CVE-2026-85501Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC5.3
- CVE-2026-82720Use-after-free in DoH stream cleanup code path5.9
- CVE-2026-82717CNAME synthesis could lead to heap corruption9.8
- CVE-2026-81642Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY9.8
- CVE-2026-81634Possible heap buffer overflow during DNSSEC canonicalization7.5
- CVE-2026-80225Possible degradation of service from continuous queries on the same TCP/DoT connection5.3
- CVE-2026-78227Use-after-free in DoQ stream output buffer on reset re-transmission6.5
- CVE-2026-77955Possible ZONEMD verification bypass window4.4
- CVE-2026-77860'serve-expired' can bypass Unbound 'wait-limit'3.7
- CVE-2026-56444Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration5.9
- CVE-2026-56416Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name4.8
- CVE-2026-55991Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp25.9
- CVE-2026-55990Packet of death for a DNSCrypt misconfigured Unbound5.9
- CVE-2026-55973'dns-error-reporting: yes' leads to stack buffer overflow7.5
- CVE-2026-55717'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash5.9
Product normalization is registry-driven with AI assist and human review. How it works