A Malicious DNS Zone Could Turn Unbound Into an RCE Target
Unbound versions through 1.26.0 contain a critical DNSSEC validator heap overflow. NLnet Labs released version 1.26.1 with fixes for this and eight additional vulnerabilities.
Tag CVE-2026-81642
