Known vulnerabilities in Unbound

Vendor: NLnet Labs
Software: Unbound
Software CPE: cpe:2.3:a:unbound_net:unbound:*:*:*:*:*:*:*:*
Total vulnerabilities: 72
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Unbound Unbound is affected by 72 known vulnerabilities: 9 high, 56 medium, 7 low Critical High Medium Low

Vulnerabilities (72)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139240 - Improper input validation
CVE-2026-32665
CWE-20 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
#VU139239 - Heap-based Buffer Overflow
CVE-2026-40691
CWE-122 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026081456
and 2 more
#VU139238 - Resource exhaustion
CVE-2026-41637
CWE-400 Low
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
#VU139237 - Improper control of a resource through its lifetime
CVE-2026-42955
CWE-664 Low
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026082050
and 4 more
#VU139236 - Improper Access Control
CVE-2026-44621
CWE-284 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026081455
and 4 more
#VU139235 - Off-by-one Error
CVE-2026-44687
CWE-193 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026082050
and 4 more
#VU139230 - Improper input validation
CVE-2026-50243
CWE-20 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026081455
and 4 more
#VU139229 - Incorrect Calculation
CVE-2026-14586
CWE-682 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
#VU139228 - Improper Handling of Exceptional Conditions
CVE-2026-50251
CWE-755 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026081218
and 5 more
#VU139227 - Use of Insufficiently Random Values
CVE-2026-50252
CWE-330 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026080743
#VU139226 - Use After Free
CVE-2026-52863
CWE-416 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
#VU139225 - Improper input validation
CVE-2026-54478
CWE-20 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
#VU139224 - Improper Access Control
CVE-2026-55708
CWE-284 Low
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026081455
and 4 more
#VU139223 - NULL Pointer Dereference
CVE-2026-55717
CWE-476 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026081455
and 4 more
#VU139222 - Stack-based buffer overflow
CVE-2026-55973
CWE-121 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB20260817114
and 1 more
#VU139221 - Improper Initialization
CVE-2026-55990
CWE-665 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026081218
and 5 more
#VU139220 - Type conversion
CVE-2026-55991
CWE-704 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
#VU139219 - Heap-based Buffer Overflow
CVE-2026-56416
CWE-122 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026081218
and 5 more
#VU139218 - Improper control of a resource through its lifetime
CVE-2026-56444
CWE-664 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026082050
and 4 more
#VU139217 - Insufficient Verification of Data Authenticity
CVE-2026-50248
CWE-345 Medium
No
No
1.25.2 23.07.2026 SB2026072350
SB20260727391
SB2026081455
and 4 more


Showing elements 1 - 20 out of 72