https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:54:36.124093+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-339388 EUVD-2026-339388 2026-10-03T09:54:36.210138+00:00 EUVD-2026-339388 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14586 fkie_cve-2026-14586 2026-10-03T09:54:36.210178+00:00

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under pressure, an assertion in libngtcp2 about monotonic timestamps could trigger and result in server termination and thus denial of service. When interfacing with libngtcp2, for DNS-over-QUIC support in Unbound, it is expected to use monotonic time. Unbound was using realtime instead, and in DoQ environments with high concurrency and under pressure, an assert in libngtcp2 for the quic timestamp would trigger and terminate the server.This vulnerability needs Unbound to be compiled with DoQ support ('--with-libngtcp2') and the 'quic-port' to be configured for the listening interfaces.

 https://cve.radiocsirt.org/vuln/ghsa-x2gg-pjp4-c6g3 GHSA-x2gg-pjp4-c6g3 2026-10-03T09:54:36.210217+00:00

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under pressure, an assertion in libngtcp2 about monotonic timestamps could trigger and result in server termination and thus denial of service. When interfacing with libngtcp2, for DNS-over-QUIC support in Unbound, it is expected to use monotonic time. Unbound was using realtime instead, and in DoQ environments with high concurrency and under pressure, an assert in libngtcp2 for the quic timestamp would trigger and terminate the server.This vulnerability needs Unbound to be compiled with DoQ support ('--with-libngtcp2') and the 'quic-port' to be configured for the listening interfaces.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-14586 msrc_CVE-2026-14586 — Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments 2026-10-03T09:54:36.210239+00:00 msrc_CVE-2026-14586 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11380-1 openSUSE-SU-2026:11380-1 — libunbound8-1.25.2-1.1 on GA media 2026-10-03T09:54:36.210257+00:00

libunbound8-1.25.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:43588 RHSA-2026:43588 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T09:54:36.210295+00:00

unbound: Unbound: Denial of Service via assertion failure in DNS-over-QUIC environments unbound: Unbound: Denial of Service via improper validation of DNS-over-QUIC client length unbound: Unbound: Denial of Service via crafted DNSCrypt query unbound: Unbound: Denial of Service via terminated DNS-over-QUIC queries unbound: Unbound: DNS cache integrity issue unbound: Unbound: Denial of Service due to 'harden-below-nxdomain' logic bypass unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes unbound: Unbound: Information disclosure via DNSSEC wildcard replay unbound: Unbound: Denial of Service via DNSSEC query amplification bypass unbound: Unbound: Denial of Service due to freed pointer dereference in DNS-over-TLS handling unbound: Unbound: Insecure DNS redirection via spoofed DNS answers unbound: Unbound: DNS response policy replacement via hostname spoofing unbound: NLnet Labs Unbound: Denial of Service via crafted DNS glue records unbound: Unbound: DNS cache poisoning via UDP source port predictability unbound: Unbound: Denial of service due to memory corruption under specific configurations. unbound: Unbound: DNS Cookie security bypass via incorrect server cookie calculation unbound: Unbound: Information disclosure due to local policy bypass via unbound-control unbound: Unbound: Denial of Service via crafted DNS responses with expired records unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option unbound:…

 https://cve.radiocsirt.org/vuln/suse-su-2026:23050-1 SUSE-SU-2026:23050-1 — Security update for unbound 2026-10-03T09:54:36.210353+00:00

Security update for unbound

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-14586 UBUNTU-CVE-2026-14586 2026-10-03T09:54:36.210378+00:00

Affected: Ubuntu:Pro:14.04:LTS: unbound, Ubuntu:Pro:16.04:LTS: unbound, Ubuntu:Pro:18.04:LTS: unbound, Ubuntu:Pro:20.04:LTS: unbound, Ubuntu:22.04:LTS: unbound, Ubuntu:24.04:LTS: unbound, Ubuntu:26.04:LTS: unbound

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under pressure, an assertion in libngtcp2 about monotonic timestamps could trigger and result in server termination and thus denial of service. When interfacing with libngtcp2, for DNS-over-QUIC support in Unbound, it is expected to use monotonic time. Unbound was using realtime instead, and in DoQ environments with high concurrency and under pressure, an assert in libngtcp2 for the quic timestamp would trigger and terminate the server.This vulnerability needs Unbound to be compiled with DoQ support ('--with-libngtcp2') and the 'quic-port' to be configured for the listening interfaces.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2492 WID-SEC-W-2026-2492 — Unbound: Mehrere Schwachstellen 2026-10-03T09:54:36.210410+00:00

Ein Angreifer kann mehrere Schwachstellen in Unbound ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Daten zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.