NewsThe Hacker News
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
Linked advisories
- CVE-2026-81642Unbound: Mehrere Schwachstellen
- CVE-2026-81642NLnet Labs Unbound: Heap-basierter Pufferüberlauf
- CVE-2026-81642Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
- CVE-2026-81642Debian unbound: security update
- CVE-2026-81642NLnet Labs Unbound: Heap-basierter Pufferüberlauf
More on Validator
Other advisories
- Not ratedosv:CLEANSTART-2026-SY78666DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator
- Highosv:MAL-2026-17932Malicious code in item-validator (npm)
- Not ratedosv:CLEANSTART-2026-HB03857DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator
- Not ratedosv:CLEANSTART-2026-HZ51336DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator
- Not ratedosv:CLEANSTART-2026-UZ99308DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator
- HighCVE-2026-104004Die Validierungsfunktion des MongoDB-Servers kann bestimmte Ausdrücke, die in einem Validator gespeichert sind, möglicherweise nicht korrekt verarbeiten.
- MediumCVE-2026-109144Wbond Certvalidator: unkontrollierter Ressourcenverbrauch
- Not ratedosv:CVE-2026-109144wbond certvalidator Certificate Path Builder resource consumption
Other news entries
- MetaMask Security Incident Prompts Exit of Affected Ethereum ValidatorsNewsThe Hacker News
- Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityNewsCisco PSIRT
- Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation VulnerabilityNewsCisco PSIRT
Source: https://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html
ID