Vulnerabilidades en NLnet Labs
96 resultadosCVE-2026-12490HIGHBypass of client certificate verification with transfer over TLSEPSS 0.2%CVE-2026-50106MEDIUMPossible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.EPSS 0.2%CVE-2026-42955LOWExtra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue recordsEPSS 0.2%CVE-2026-46582LOWA wildcard replay, as another piece of data, triggers poisoning in the serve expired reply pathEPSS 0.2%CVE-2026-72755LOWRoutinator stores TA certificate in cache without validationEPSS 0.2%CVE-2026-77955MEDIUMPossible ZONEMD verification bypass windowEPSS 0.2%CVE-2026-109125MEDIUMPossible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'EPSS 0.2%CVE-2026-50252MEDIUMPossible cache poisoning attack by mapping source port population per threadEPSS 0.2%CVE-2026-55708LOWPrivacy/configuration issue when adding local data in views through 'unbound-control'EPSS 0.2%CVE-2026-44690HIGHCross-zone wildcard cache poisoning via RRSIG.labels manipulationEPSS 0.2%CVE-2026-10846HIGHInsufficient verification that responses belong to a queryEPSS 0.1%CVE-2026-40622MEDIUMAnother 'ghost domain names' attack variantEPSS 0.1%CVE-2026-50248MEDIUMBOGUS configured primary hostname accepted for XFR in auth/rpz zonesEPSS 0.1%CVE-2026-56416MEDIUMPossible heap buffer overflow when validator canonicalizes RDATA that contains domain nameEPSS 0.1%CVE-2026-35501LOWBypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.EPSS 0.1%CVE-2026-50243MEDIUM'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAILEPSS 0.1%