Unbound

Unbound DNS Vulnerabilities Expose Resolvers to RCE Diagram illustrating critical Unbound DNS vulnerabilities and DNSSEC heap corruption

Unbound DNS Vulnerabilities Expose Resolvers to RCE

Do Son September 17, 2026

NLnet Labs released version 1.26.1 on September 16, 2026, fixing multiple severe Unbound DNS vulnerabilities. These flaws...

NLnet Labs Issues Urgent Security Release for Unbound Resolver Unbound DNSSEC validation vulnerability

NLnet Labs Issues Urgent Security Release for Unbound Resolver

Do Son May 25, 2026

NLnet Labs has released a major security update for its popular Unbound DNS resolver software. The release...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-71362CVSS 9.1
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-48842CVSS 8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-87902
Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-94127CVSS 9.8
When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-85102CVSS 9.8
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-93616CVSS 9.8
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-93952CVSS 10.0
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026

CVE-2026-78445CVSS 9.8
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code...
📅 Updated: Sep 24, 2026
CVE-2026-77493CVSS 9.8
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
📅 Updated: Sep 24, 2026
CVE-2026-73025CVSS 9.8
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
📅 Updated: Sep 24, 2026
CVE-2026-73009CVSS 9.8
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over...
📅 Updated: Sep 24, 2026
CVE-2026-72979CVSS 9.8
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
📅 Updated: Sep 24, 2026
CVE-2026-72982CVSS 9.8
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
📅 Updated: Sep 24, 2026
CVE-2026-72983CVSS 9.8
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a...
📅 Updated: Sep 24, 2026
CVE-2026-70296CVSS 9.8
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
📅 Updated: Sep 24, 2026