Known Vulnerabilities for products from Nlnetlabs
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Nlnetlabs".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-85501 json | Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These ... | Not Provided | 2026-09-16 | 2026-09-23 |
| CVE-2026-82720 json | NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs supp... | Not Provided | 2026-09-16 | 2026-09-23 |
| CVE-2026-82717 json | In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and... | Not Provided | 2026-09-16 | 2026-09-23 |
| CVE-2026-81642 json | In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of se... | Not Provided | 2026-09-16 | 2026-09-22 |
| CVE-2026-81634 json | In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer... | Not Provided | 2026-09-16 | 2026-09-23 |
| CVE-2026-80225 json | In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading pro... | Not Provided | 2026-09-16 | 2026-09-23 |
| CVE-2026-78227 json | NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC supp... | Not Provided | 2026-09-16 | 2026-09-23 |
| CVE-2026-77955 json | In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones (zonemd-check: yes) which... | Not Provided | 2026-09-16 | 2026-09-23 |
| CVE-2026-77860 json | In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double d... | Not Provided | 2026-09-16 | 2026-09-23 |
| CVE-2026-56444 json | In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expi... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-56416 json | In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-cov... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-55991 json | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion (i... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-55990 json | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' file... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-55973 json | In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel opti... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-55717 json | In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: |
Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-55708 json | In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and 'view_local_datas' commands of 'unbound-con... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-54478 json | In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answ... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-52863 json | In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, cre... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-50252 json | In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret valu... | Not Provided | 2026-07-22 | 2026-07-24 |
| CVE-2026-50251 json | In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled (set to any value greate... | Not Provided | 2026-07-22 | 2026-07-24 |
Known software with vulnerabilities from Nlnetlabs
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Nlnetlabs | Ldns | 0.50 |
| Application | Nlnetlabs | Name Server Daemon | 1.0.2 |
| Application | Nlnetlabs | Nsd | 3.0.0 |
| Application | Nlnetlabs | Routinator | 0.1.0 |
| Application | Nlnetlabs | Unbound | - |