24h | 7d | 30d

CVE-2026-35501

Overview

  • NLnet Labs
  • Unbound
21 Oct 2026
Published
21 Oct 2026
Updated
CVSS v3.1
LOW (3.7)
EPSS
Pending
KEV

Description

When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent is provably insecure under the root chain, a malicious actor with a forged NSEC reply with the SOA bit cleared can trick Unbound to treat the configured trust island as insecure. This happens because the DNSSEC validator in Unbound accepts and caches the NSEC insecure response bypassing the RRSIG validation that the validator was supposed to do. The acceptance of the NSEC record at the trust anchor apex was allowed due to and old fix for type DS and NSEC queries from clients when trust anchor for that name existed.

Statistics

  • 1 Post
  • 15 Interactions
Last activity: 3 hours ago

Fediverse

Profile picture fallback
NLnet Labs @nlnetlabs

🚨 Security update: Unbound 1.26.2 is now available.

This release consolidates security fixes for issues reported over a period of time. There are fixes for CVE-2026-35501, CVE-2026-50106, CVE-2026-96405, CVE-2026-97206 and CVE-2026-109125.

community.nlnetlabs.nl/t/unbou

#DNS #OpenSource #Security #CVE

  • 10
  • 5
  • 0
  • 3h ago

CVE-2026-50106

Overview

  • NLnet Labs
  • Unbound
21 Oct 2026
Published
21 Oct 2026
Updated
CVSS v3.1
MEDIUM (6.5)
EPSS
Pending
KEV

Description

When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent is provably insecure under the root chain, a malicious actor who can deliver one forged NXDOMAIN response for a name inside the island, with the NSEC/SOA RRSIG 'SignerName' set to the insecure parent, tricks Unbound's validator to use the root trust anchor instead, and consecutively the insecure parent, thus causing that record to be treated as insecure and denying existence for records in the trust island.

Statistics

  • 1 Post
  • 15 Interactions
Last activity: 3 hours ago

Fediverse

Profile picture fallback
NLnet Labs @nlnetlabs

🚨 Security update: Unbound 1.26.2 is now available.

This release consolidates security fixes for issues reported over a period of time. There are fixes for CVE-2026-35501, CVE-2026-50106, CVE-2026-96405, CVE-2026-97206 and CVE-2026-109125.

community.nlnetlabs.nl/t/unbou

#DNS #OpenSource #Security #CVE

  • 10
  • 5
  • 0
  • 3h ago

CVE-2026-97206

Overview

  • NLnet Labs
  • Unbound
21 Oct 2026
Published
21 Oct 2026
Updated
CVSS v3.1
HIGH (7.5)
EPSS
Pending
KEV

Description

NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter stream/connection cleanup while a mesh reply still retains a pointer to the DoQ stream. Cleanup frees the DoQ stream and when the pending mesh reply later completes it dereferences a stale pointer leading to a crash.

Statistics

  • 1 Post
  • 15 Interactions
Last activity: 3 hours ago

Fediverse

Profile picture fallback
NLnet Labs @nlnetlabs

🚨 Security update: Unbound 1.26.2 is now available.

This release consolidates security fixes for issues reported over a period of time. There are fixes for CVE-2026-35501, CVE-2026-50106, CVE-2026-96405, CVE-2026-97206 and CVE-2026-109125.

community.nlnetlabs.nl/t/unbou

#DNS #OpenSource #Security #CVE

  • 10
  • 5
  • 0
  • 3h ago

CVE-2026-109125

Overview

  • NLnet Labs
  • Unbound
21 Oct 2026
Published
21 Oct 2026
Updated
CVSS v3.1
MEDIUM (5.3)
EPSS
Pending
KEV

Description

In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0' configurations (not a default configuration). If a response-like UDP datagram reaches the upstream source port currently used by a recursive query, but its TXID does not match any pending query, Unbound counts the packet as an unwanted reply. When the accumulated count reaches the configured threshold, Unbound clears the worker's RRset cache and message cache. This cache clear action does not destroy the current upstream UDP pending query. Therefore, an external observer can distinguish whether a candidate port matches the current upstream source port by checking whether an existing cached item has been cleared. This is a cache side-channel vulnerability that can be used to probe the upstream source port. Although the attack is not feasible on default configurations and the suggested value (10 million) makes it an ureliable attack on a public resolver, in scenarios where the attacker can keep a concurrent query window alive, the attacker can first filter the source port and then perform birthday-style guessing against the TXID, making cache poisoning a feasible attack path.

Statistics

  • 1 Post
  • 15 Interactions
Last activity: 3 hours ago

Fediverse

Profile picture fallback
NLnet Labs @nlnetlabs

🚨 Security update: Unbound 1.26.2 is now available.

This release consolidates security fixes for issues reported over a period of time. There are fixes for CVE-2026-35501, CVE-2026-50106, CVE-2026-96405, CVE-2026-97206 and CVE-2026-109125.

community.nlnetlabs.nl/t/unbou

#DNS #OpenSource #Security #CVE

  • 10
  • 5
  • 0
  • 3h ago

CVE-2026-96405

Overview

  • NLnet Labs
  • Unbound
21 Oct 2026
Published
21 Oct 2026
Updated
CVSS v3.1
MEDIUM (5.3)
EPSS
Pending
KEV

Description

NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious actor with recursive-query access and control of an ordinarily delegated authority that serves specially crafted replies can exploit the vulnerability and degrade Unbound's general performance.

Statistics

  • 1 Post
  • 15 Interactions
Last activity: 3 hours ago

Fediverse

Profile picture fallback
NLnet Labs @nlnetlabs

🚨 Security update: Unbound 1.26.2 is now available.

This release consolidates security fixes for issues reported over a period of time. There are fixes for CVE-2026-35501, CVE-2026-50106, CVE-2026-96405, CVE-2026-97206 and CVE-2026-109125.

community.nlnetlabs.nl/t/unbou

#DNS #OpenSource #Security #CVE

  • 10
  • 5
  • 0
  • 3h ago

CVE-2026-15176

Overview

  • F5
  • NGINX Plus
14 Oct 2026
Published
15 Oct 2026
Updated
CVSS v3.1
HIGH (8.1)
EPSS
0.52%
KEV

Description

A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable. Alternatively, the same result could be achieved when the $request_filename variable is used in an access log format directive. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 22 hours ago

Fediverse

Profile picture fallback
ThreatNoir @threatnoir

⚠️ CRITICAL: F5 releases out-of-band patches for critical NGINX vulnerabilities

F5 released emergency patches for three critical NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, CVE-2026-93479) that enable remote code execution and denial-of-service attacks via heap buffer overflows and use-after-free conditions. All NGINX product versions are affected. F5 infrastructure…

threatnoir.com/focus

🤖 AI generated summary

  • 2
  • 0
  • 0
  • 22h ago

CVE-2026-93479

Overview

  • F5
  • NGINX Plus
14 Oct 2026
Published
15 Oct 2026
Updated
CVSS v3.1
HIGH (8.1)
EPSS
0.55%
KEV

Description

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable in a string expression under certain conditions. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Impact:  This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 22 hours ago

Fediverse

Profile picture fallback
ThreatNoir @threatnoir

⚠️ CRITICAL: F5 releases out-of-band patches for critical NGINX vulnerabilities

F5 released emergency patches for three critical NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, CVE-2026-93479) that enable remote code execution and denial-of-service attacks via heap buffer overflows and use-after-free conditions. All NGINX product versions are affected. F5 infrastructure…

threatnoir.com/focus

🤖 AI generated summary

  • 2
  • 0
  • 0
  • 22h ago

CVE-2026-97205

Overview

  • F5
  • NGINX Plus
14 Oct 2026
Published
15 Oct 2026
Updated
CVSS v3.1
HIGH (8.1)
EPSS
0.48%
KEV

Description

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes (SSI) page containing “include virtual” commands may trigger a Use-After-Free (UAF) in the NGINX worker process. This may cause memory corruption or a worker process crash. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system, corrupt its memory, or possibly trigger code execution. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 22 hours ago

Fediverse

Profile picture fallback
ThreatNoir @threatnoir

⚠️ CRITICAL: F5 releases out-of-band patches for critical NGINX vulnerabilities

F5 released emergency patches for three critical NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, CVE-2026-93479) that enable remote code execution and denial-of-service attacks via heap buffer overflows and use-after-free conditions. All NGINX product versions are affected. F5 infrastructure…

threatnoir.com/focus

🤖 AI generated summary

  • 2
  • 0
  • 0
  • 22h ago

CVE-2026-86471

Overview

  • Apache Software Foundation
  • Apache CouchDB
20 Oct 2026
Published
21 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.3)
EPSS
Pending
KEV

Description

An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user. Users are recommended to upgrade to version 3.5.3, which fixes this issue.

Statistics

  • 1 Post
Last activity: 8 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Six Apache CouchDB vulnerabilities, including CVSS 9.3 CVE-2026-86471, are fixed in 3.5.3. Retired Apache Cocoon gets four unpatched flaws.

securityonline.info/apache-cou

  • 0
  • 0
  • 0
  • 8h ago

CVE-2026-103119

Overview

  • Apache Software Foundation
  • Apache Tomcat
20 Oct 2026
Published
20 Oct 2026
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second. This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26. Users are recommended to upgrade to version 11.0.27, which fixes the issue.

Statistics

  • 1 Post
Last activity: 10 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Eight Apache Tomcat vulnerabilities, including a JNDIRealm authentication bypass, are fixed in 11.0.27, 10.1.61 and 9.0.123. Upgrade now.

securityonline.info/apache-tom

  • 0
  • 0
  • 0
  • 10h ago
Showing 71 to 80 of 111 CVEs