[NEW] [medium] Unbound: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Unbound to perform a denial of service attack, disclose information, manipulate data, and bypass security measures.
CSIRTS triage
- What
- Multiple vulnerabilities allow an attacker to perform denial of service, disclose information, and manipulate data.
- Who is affected
- Deployments of Unbound are affected.
- Urgency
- Remediation is medium urgency as the vulnerabilities are not currently exploited.
- Action
- Update Unbound to the latest version to mitigate these vulnerabilities.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Unbound
Get an email when a new Unbound advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2492
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-145860.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all scored CVEs.
- Low exploitation riskCVE-2026-326650.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all scored CVEs.
- Low exploitation riskCVE-2026-406910.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all scored CVEs.
- Low exploitation riskCVE-2026-416370.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all scored CVEs.
- Low exploitation riskCVE-2026-429550.20% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 10% of all scored CVEs.
- Low exploitation riskCVE-2026-446210.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all scored CVEs.
- Low exploitation riskCVE-2026-446870.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all scored CVEs.
- Low exploitation riskCVE-2026-446900.14% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 4% of all scored CVEs.
- Low exploitation riskCVE-2026-465820.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all scored CVEs.
- Low exploitation riskCVE-2026-500450.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all scored CVEs.
Referenced CVEs
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- mediumCVE-2026-56444: In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serv…nvd
- mediumCVE-2026-56416: In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canoni…nvd
- mediumCVE-2026-55991: In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can t…nvd
- mediumCVE-2026-55990: In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more…nvd
- highCVE-2026-55973: In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is se…nvd
- mediumCVE-2026-55717: In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set toge…nvd
- lowCVE-2026-55708: In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and 'view_local_…nvd
- lowCVE-2026-54478: In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-prot…nvd
- mediumCVE-2026-52863: In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dn…nvd
- criticalCVE-2026-50252: In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and int…nvd
- mediumCVE-2026-50251: In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is e…nvd
- mediumCVE-2026-50248: In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured…nvd
Recent advisories for Unbound
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- mediumGHSA-6hxr-mr5r-9836: re2: Global `String.prototype.match` with an empty-matchable pattern never advances → inf…ghsa · 2026-07-31
- highGHSA-88fw-v6x4-3f58: Spring Data: Unbounded property-path cache keyed by externally-supplied path stringghsa · 2026-07-31
- mediumCVE-2026-52857: Wings is the server control plane for Pterodactyl, a free, open-source game server management …nvd · 2026-07-31
- highCVE-2026-16308: IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quark…nvd · 2026-07-30
- highGHSA-h669-8m4g-r2hc: MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in St…ghsa · 2026-07-30
- mediumGHSA-52jp-gj8w-j6xh: MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaus…ghsa · 2026-07-30
More from CERT-Bund (BSI) Security Advisories
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow Denial of Service2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities2026-07-31
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-31
- medium[UPDATE] [medium] Linux Kernel (ntfs3): Vulnerability allows information disclosure2026-07-31