https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:12:41.142113+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-339647 EUVD-2026-339647 2026-10-02T14:12:41.157582+00:00 EUVD-2026-339647 https://cve.radiocsirt.org/vuln/fkie_cve-2026-50045 fkie_cve-2026-50045 2026-10-02T14:12:41.157619+00:00

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to send more upstream packets per client query than the configured 'max-global-quota'. This effectively bypasses a security configuration that limits upstream amplification traffic.

 https://cve.radiocsirt.org/vuln/ghsa-pjhw-m9f8-mwqg GHSA-pjhw-m9f8-mwqg 2026-10-02T14:12:41.157653+00:00

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to send more upstream packets per client query than the configured 'max-global-quota'. This effectively bypasses a security configuration that limits upstream amplification traffic.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-50045 msrc_CVE-2026-50045 — 'max-global-quota' reset by DNSSEC validation restarts 2026-10-02T14:12:41.157672+00:00 msrc_CVE-2026-50045 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11380-1 openSUSE-SU-2026:11380-1 — libunbound8-1.25.2-1.1 on GA media 2026-10-02T14:12:41.157690+00:00

libunbound8-1.25.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:43588 RHSA-2026:43588 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T14:12:41.157714+00:00

unbound: Unbound: Denial of Service via assertion failure in DNS-over-QUIC environments unbound: Unbound: Denial of Service via improper validation of DNS-over-QUIC client length unbound: Unbound: Denial of Service via crafted DNSCrypt query unbound: Unbound: Denial of Service via terminated DNS-over-QUIC queries unbound: Unbound: DNS cache integrity issue unbound: Unbound: Denial of Service due to 'harden-below-nxdomain' logic bypass unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes unbound: Unbound: Information disclosure via DNSSEC wildcard replay unbound: Unbound: Denial of Service via DNSSEC query amplification bypass unbound: Unbound: Denial of Service due to freed pointer dereference in DNS-over-TLS handling unbound: Unbound: Insecure DNS redirection via spoofed DNS answers unbound: Unbound: DNS response policy replacement via hostname spoofing unbound: NLnet Labs Unbound: Denial of Service via crafted DNS glue records unbound: Unbound: DNS cache poisoning via UDP source port predictability unbound: Unbound: Denial of service due to memory corruption under specific configurations. unbound: Unbound: DNS Cookie security bypass via incorrect server cookie calculation unbound: Unbound: Information disclosure due to local policy bypass via unbound-control unbound: Unbound: Denial of Service via crafted DNS responses with expired records unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option unbound:…

 https://cve.radiocsirt.org/vuln/suse-su-2026:23050-1 SUSE-SU-2026:23050-1 — Security update for unbound 2026-10-02T14:12:41.157765+00:00

Security update for unbound

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-50045 UBUNTU-CVE-2026-50045 2026-10-02T14:12:41.157786+00:00

Affected: Ubuntu:Pro:14.04:LTS: unbound, Ubuntu:Pro:16.04:LTS: unbound, Ubuntu:Pro:18.04:LTS: unbound, Ubuntu:Pro:20.04:LTS: unbound, Ubuntu:22.04:LTS: unbound, Ubuntu:24.04:LTS: unbound, Ubuntu:26.04:LTS: unbound

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to send more upstream packets per client query than the configured 'max-global-quota'. This effectively bypasses a security configuration that limits upstream amplification traffic.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2492 WID-SEC-W-2026-2492 — Unbound: Mehrere Schwachstellen 2026-10-02T14:12:41.157817+00:00

Ein Angreifer kann mehrere Schwachstellen in Unbound ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Daten zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.