Vulnerabilidades en NLnet Labs
96 resultadosCVE-2026-109140HIGHKrill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" tokenEPSS 0.3%CVE-2026-77860LOW'serve-expired' can bypass Unbound 'wait-limit'EPSS 0.3%CVE-2026-40691HIGHPacket of death for DNSCrypt over TCPEPSS 0.3%CVE-2026-32665HIGHRemote DNS-over-QUIC denial of service due to `quic-size` budget bypassEPSS 0.3%CVE-2026-55973HIGH'dns-error-reporting: yes' leads to stack buffer overflowEPSS 0.3%CVE-2026-109141HIGHKrill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk importEPSS 0.3%CVE-2026-109142HIGHKrill treats a "local parent" as already-authenticated, letting a CA operator act as any child of any CA on the same serverEPSS 0.3%CVE-2026-49234HIGHRoutinator crashes on specifically crafted ASN strings in the APIEPSS 0.3%CVE-2026-42960MEDIUMPossible cache poisoning via promiscuous records for the authority sectionEPSS 0.3%CVE-2026-44608MEDIUMUse after free and crash under special conditions in RPZ codeEPSS 0.3%CVE-2026-96405MEDIUMAggregate DNS name chained pointer decompression work leads to degradation of service.EPSS 0.3%CVE-2026-50251MEDIUMAttacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flushEPSS 0.3%CVE-2026-44621MEDIUMLibunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminatedEPSS 0.2%CVE-2026-55990MEDIUMPacket of death for a DNSCrypt misconfigured UnboundEPSS 0.2%CVE-2026-54478LOWDNS Cookie bypass when combined with proxy-protocol useEPSS 0.2%CVE-2026-72752MEDIUMRoutinator exits when requesting the output repeatedlyEPSS 0.2%CVE-2026-55717MEDIUM'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crashEPSS 0.2%CVE-2026-50046MEDIUMPossible heap use-after-free in an error path when a DoT forwarded query is jostled outEPSS 0.2%CVE-2026-44687LOWOff-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAINEPSS 0.2%CVE-2025-5994HIGHCache poisoning via the ECS-enabled Rebirthday AttackEPSS 0.2%