https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:59:33.137424+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:11849 ALSA-2025:11849 — Important: unbound security update 2026-10-02T23:59:33.203857+00:00

Affected: AlmaLinux:9: python3-unbound, AlmaLinux:9: unbound, AlmaLinux:9: unbound-devel, AlmaLinux:9: unbound-dracut, AlmaLinux:9: unbound-libs

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* unbound: Unbound Cache poisoning (CVE-2025-5994)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-12600 bdu:2025-12600 2026-10-02T23:59:33.203933+00:00 bdu:2025-12600 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0789 certfr-2025-avi-0789 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T23:59:33.203951+00:00 certfr-2025-avi-0789 https://cve.radiocsirt.org/vuln/cleanstart-2026-nh76134 CLEANSTART-2026-NH76134 — Security fix for CVE-2025-5994 applied in: coredns 1.14.0-r0 2026-10-02T23:59:33.203968+00:00

Affected: CleanStart: coredns

Security vulnerability affects the coredns package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-257581 EUVD-2026-257581 2026-10-02T23:59:33.203988+00:00 EUVD-2026-257581 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5994 fkie_cve-2025-5994 2026-10-02T23:59:33.203999+00:00

A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to upstream name servers, i.e., at least one of the 'send-client-subnet', 'client-subnet-zone' or 'client-subnet-always-forward' options is used. Resolvers supporting ECS need to segregate outgoing queries to accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous replies.

 https://cve.radiocsirt.org/vuln/ghsa-xrv5-2wwg-jp3r GHSA-xrv5-2wwg-jp3r 2026-10-02T23:59:33.204024+00:00

A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to upstream name servers, i.e., at least one of the 'send-client-subnet', 'client-subnet-zone' or 'client-subnet-always-forward' options is used. Resolvers supporting ECS need to segregate outgoing queries to accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous replies.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-5994 msrc_CVE-2025-5994 — Cache poisoning via the ECS-enabled Rebirthday Attack 2026-10-02T23:59:33.204042+00:00 msrc_CVE-2025-5994 https://cve.radiocsirt.org/vuln/oesa-2025-1974 OESA-2025-1974 — unbound security update 2026-10-02T23:59:33.204057+00:00

Affected: openEuler:22.03-LTS-SP3: unbound, openEuler:22.03-LTS-SP4: unbound, openEuler:24.03-LTS: unbound, openEuler:24.03-LTS-SP1: unbound, openEuler:24.03-LTS-SP2: unbound, openEuler:20.03-LTS-SP4: unbound

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most platforms such as FreeBSD, OpenBSD, NetBSD, MacOS, Linux and Microsoft Windows. Unbound is a totally free, open source software under the BSD license. It doesn't make custom builds or provide specific features to paying customers only. Security Fix(es):

NLnet Unbound is an open source DNS server for the Netherlands NLnet team. NLnet Unbound has a security vulnerability that originates from the risk of cache poisoning when supporting EDNS Client Subnet, which may lead to Rebirthday attacks.(CVE-2025-5994)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15435-1 openSUSE-SU-2025:15435-1 — libunbound8-1.23.1-1.1 on GA media 2026-10-02T23:59:33.204089+00:00

libunbound8-1.23.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:12064 RHSA-2025:12064 — Red Hat Security Advisory: unbound security update 2026-10-02T23:59:33.204105+00:00

unbound: Unbound Cache poisoning

 https://cve.radiocsirt.org/vuln/rlsa-2025:11884 RLSA-2025:11884 — Important: unbound security update 2026-10-02T23:59:33.204120+00:00

Affected: Rocky Linux:8: unbound

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* unbound: Unbound Cache poisoning (CVE-2025-5994)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-5994 UBUNTU-CVE-2025-5994 2026-10-02T23:59:33.204140+00:00

Affected: Ubuntu:Pro:14.04:LTS: unbound, Ubuntu:Pro:16.04:LTS: unbound, Ubuntu:Pro:18.04:LTS: unbound, Ubuntu:Pro:20.04:LTS: unbound, Ubuntu:22.04:LTS: unbound, Ubuntu:24.04:LTS: unbound, Ubuntu:25.10: unbound

A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to upstream name servers, i.e., at least one of the 'send-client-subnet', 'client-subnet-zone' or 'client-subnet-always-forward' options is used. Resolvers supporting ECS need to segregate outgoing queries to accommodate for different outgoing ECS information. This re-opens up resolvers to a birthday paradox attack (Rebirthday Attack) that tries to match the DNS transaction ID in order to cache non-ECS poisonous replies.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1656 WID-SEC-W-2025-1656 — Red Hat Enterprise Linux (unbound): Schwachstelle ermöglicht Manipulation von Daten 2026-10-02T23:59:33.204169+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (unbound) ausnutzen, um Daten zu manipulieren.