Known Vulnerabilities for products from Nlnetlabs
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Nlnetlabs".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-56444 json | In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expi... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-56416 json | In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-cov... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-55991 json | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion (i... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-55990 json | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' file... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-55973 json | In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel opti... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-55717 json | In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: |
Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-55708 json | In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and 'view_local_datas' commands of 'unbound-con... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-54478 json | In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answ... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-52863 json | In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, cre... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-50252 json | In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret valu... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-50251 json | In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled (set to any value greate... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-50248 json | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured primary hostname that resolves... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-50243 json | In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front of the v... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-50046 json | In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS (DoT) forwarded queries is... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-50045 json | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-49235 json | When Routinator encounters a file via RRDP using a specifically crafted Document Type Definition, Routinator crashes. | Not Provided | 2026-06-08 | 2026-07-23 |
| CVE-2026-49234 json | When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinato... | Not Provided | 2026-06-08 | 2026-07-23 |
| CVE-2026-49233 json | Routinator does not properly check the module component of rsync URIs, which are used to create the file system paths for the... | Not Provided | 2026-06-08 | 2026-07-23 |
| CVE-2026-46582 json | In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be brief... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-44690 json | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with prema... | Not Provided | 2026-07-22 | 2026-07-24 |
Known software with vulnerabilities from Nlnetlabs
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Nlnetlabs | Ldns | 0.50 |
| Application | Nlnetlabs | Name Server Daemon | 1.0.2 |
| Application | Nlnetlabs | Nsd | 3.0.0 |
| Application | Nlnetlabs | Routinator | 0.1.0 |
| Application | Nlnetlabs | Unbound | - |