NLnet Labs

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

A critical heap overflow vulnerability in Unbound DNS resolver versions prior to 1.26.1 allows remote code execution via a malicious DNS zone. The vulnerability, tracked as CVE-2026-81642, has been patched in version 1.2…