Unbound: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Unbound ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Daten zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-249224 linked CVEs
Open advisory with all CVEs
More on Unbound
Other advisories
- HighCVE-2026-35501Unbound: Mehrere Schwachstellen
- HighCVE-2026-112892Pillow: MSP RLE decoder expands a tiny file into unbounded memory
- MediumCVE-2026-113650ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)
- CriticalCVE-2026-77955Unbound: Mehrere Schwachstellen
- HighCVE-2026-56444Unbound: Mehrere Schwachstellen
- HighCVE-2026-40691Unbound vulnerabilities
- HighCVE-2026-97206NLnet Labs Unbound: Use-After-Free
- MediumCVE-2026-96405NLnet Labs Unbound: Ressourcenzuweisung ohne Begrenzung
Other news entries
- Unbound: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Unbound: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- How AI Agents Can Trigger Runaway Costs for EnterprisesNewsDark Reading
- Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS ZoneNewsThe Hacker News
- Unbound: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Unbound: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Unbound: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Red Hat Enterprise Linux (unbound und mpg123): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2492
ID