#unbound
-
Critical Flaw in Unbound's DNSSEC Validator Threatens Remote Code Execution
NLnet Labs has released Unbound 1.26.1, fixing a critical heap overflow in the DNSSEC validator (CVE-2026-81642) that could lead to RCE via a malicious DNS zone, along with eight other vulnerabilities.