{"schema_version":1,"title":"NLnet Labs vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 49 vulnerabilities in NLnet Labs: 0 in the last 7 days and 33 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-85501, was published on 16 September 2026. 2 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/nlnet-labs","json_url":"https://junglewise.ai/threats/vendors/nlnet-labs.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/nlnet-labs","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":8,"all_time":49,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":7,"last_90_days":33,"last_365_days":49},"latest":[{"cve":"CVE-2026-85501","cvss":5.3,"epss":0.0048,"slug":"cve-2026-85501-nlnet-labs-unbound-dns-complexity-attacks-via-retrap","title":"NLnet Labs Unbound DNS complexity attacks via ReTrap","severity":"medium","exploited":false,"published_at":"2026-09-16T09:17:06.783+00:00","url":"https://junglewise.ai/threats/cve-2026-85501-nlnet-labs-unbound-dns-complexity-attacks-via-retrap"},{"cve":"CVE-2026-82720","cvss":5.9,"epss":0.0038,"slug":"cve-2026-82720-nlnet-labs-unbound-use-after-free-in-dns-over-https","title":"NLnet Labs Unbound use-after-free in DNS-over-HTTPs","severity":"medium","exploited":false,"published_at":"2026-09-16T09:17:06.677+00:00","url":"https://junglewise.ai/threats/cve-2026-82720-nlnet-labs-unbound-use-after-free-in-dns-over-https"},{"cve":"CVE-2026-82717","cvss":9.8,"epss":0.0078,"slug":"cve-2026-82717-nlnet-labs-unbound-heap-buffer-overflow-in-cname-synthesis","title":"NLnet Labs Unbound heap buffer overflow in CNAME synthesis","severity":"critical","exploited":false,"published_at":"2026-09-16T09:17:06.55+00:00","url":"https://junglewise.ai/threats/cve-2026-82717-nlnet-labs-unbound-heap-buffer-overflow-in-cname-synthesis"},{"cve":"CVE-2026-81642","cvss":9.8,"epss":0.0096,"slug":"cve-2026-81642-nlnet-labs-unbound-dnssec-validator-buffer-overflow","title":"NLnet Labs Unbound DNSSEC validator buffer overflow","severity":"critical","exploited":false,"published_at":"2026-09-16T09:17:06.32+00:00","url":"https://junglewise.ai/threats/cve-2026-81642-nlnet-labs-unbound-dnssec-validator-buffer-overflow"},{"cve":"CVE-2026-81634","cvss":7.5,"epss":0.0048,"slug":"cve-2026-81634-nlnet-labs-unbound-heap-buffer-overflow-in-rrset-canonicalisation","title":"NLnet Labs Unbound heap buffer overflow in RRSet canonicalisation","severity":"high","exploited":false,"published_at":"2026-09-16T09:17:06.21+00:00","url":"https://junglewise.ai/threats/cve-2026-81634-nlnet-labs-unbound-heap-buffer-overflow-in-rrset-canonicalisation"},{"cve":"CVE-2026-78227","cvss":6.5,"epss":0.0034,"slug":"cve-2026-78227-nlnet-labs-unbound-use-after-free-in-dns-over-quic","title":"NLnet Labs Unbound use-after-free in DNS-over-QUIC","severity":"medium","exploited":false,"published_at":"2026-09-16T09:17:05.987+00:00","url":"https://junglewise.ai/threats/cve-2026-78227-nlnet-labs-unbound-use-after-free-in-dns-over-quic"},{"cve":"CVE-2026-77955","cvss":4.4,"epss":0.0017,"slug":"cve-2026-77955-nlnet-labs-unbound-zonemd-check-bypass-in-delegated-zones","title":"NLnet Labs Unbound ZONEMD check bypass in delegated zones","severity":"medium","exploited":false,"published_at":"2026-09-16T09:17:05.78+00:00","url":"https://junglewise.ai/threats/cve-2026-77955-nlnet-labs-unbound-zonemd-check-bypass-in-delegated-zones"},{"cve":"CVE-2026-56444","cvss":5.9,"slug":"cve-2026-56444-nlnet-labs-unbound-resource-exhaustion-in-serve-expired-logic","title":"NLnet Labs Unbound resource exhaustion in serve-expired logic","severity":"medium","exploited":false,"published_at":"2026-07-22T14:17:22.203+00:00","url":"https://junglewise.ai/threats/cve-2026-56444-nlnet-labs-unbound-resource-exhaustion-in-serve-expired-logic"},{"cve":"CVE-2026-56416","cvss":4.8,"slug":"cve-2026-56416-nlnet-labs-unbound-heap-buffer-overflow-in-dnssec-validator","title":"NLnet Labs Unbound heap buffer overflow in DNSSEC validator","severity":"medium","exploited":false,"published_at":"2026-07-22T14:17:22.09+00:00","url":"https://junglewise.ai/threats/cve-2026-56416-nlnet-labs-unbound-heap-buffer-overflow-in-dnssec-validator"},{"cve":"CVE-2026-55991","cvss":5.9,"slug":"cve-2026-55991-nlnet-labs-unbound-denial-of-service-in-dns-over-quic","title":"NLnet Labs Unbound denial of service in DNS-over-QUIC","severity":"medium","exploited":false,"published_at":"2026-07-22T14:17:21.957+00:00","url":"https://junglewise.ai/threats/cve-2026-55991-nlnet-labs-unbound-denial-of-service-in-dns-over-quic"},{"cve":"CVE-2026-55990","cvss":5.9,"slug":"cve-2026-55990-nlnet-labs-unbound-denial-of-service-in-dnscrypt","title":"NLnet Labs Unbound denial of service in DNSCrypt","severity":"medium","exploited":false,"published_at":"2026-07-22T14:17:21.81+00:00","url":"https://junglewise.ai/threats/cve-2026-55990-nlnet-labs-unbound-denial-of-service-in-dnscrypt"},{"cve":"CVE-2026-55973","cvss":7.5,"slug":"cve-2026-55973-nlnet-labs-unbound-stack-overflow-in-dns-error-reporting","title":"NLnet Labs Unbound stack overflow in DNS error reporting","severity":"high","exploited":false,"published_at":"2026-07-22T14:17:21.663+00:00","url":"https://junglewise.ai/threats/cve-2026-55973-nlnet-labs-unbound-stack-overflow-in-dns-error-reporting"},{"cve":"CVE-2026-55717","cvss":5.9,"slug":"cve-2026-55717-nlnet-labs-unbound-dos-via-null-pointer-dereference-in-serve","title":"NLnet Labs Unbound DoS via NULL pointer dereference in serve-expired-client-timeout","severity":"medium","exploited":false,"published_at":"2026-07-22T14:17:21.537+00:00","url":"https://junglewise.ai/threats/cve-2026-55717-nlnet-labs-unbound-dos-via-null-pointer-dereference-in-serve"},{"cve":"CVE-2026-55708","cvss":3.1,"slug":"cve-2026-55708-nlnet-labs-unbound-insecure-default-initialization-in-unbound","title":"NLnet Labs Unbound insecure default initialization in unbound-control","severity":"low","exploited":false,"published_at":"2026-07-22T14:17:21.403+00:00","url":"https://junglewise.ai/threats/cve-2026-55708-nlnet-labs-unbound-insecure-default-initialization-in-unbound"},{"cve":"CVE-2026-54478","cvss":3.7,"slug":"cve-2026-54478-nlnet-labs-unbound-dns-cookie-authentication-bypass-in-proxyv2","title":"NLnet Labs Unbound DNS Cookie authentication bypass in PROXYv2","severity":"low","exploited":false,"published_at":"2026-07-22T14:17:21.177+00:00","url":"https://junglewise.ai/threats/cve-2026-54478-nlnet-labs-unbound-dns-cookie-authentication-bypass-in-proxyv2"},{"cve":"CVE-2026-52863","cvss":5.9,"slug":"cve-2026-52863-nlnet-labs-unbound-use-after-free-in-respip-and-dns64-modules","title":"NLnet Labs Unbound use-after-free in respip and dns64 modules","severity":"medium","exploited":false,"published_at":"2026-07-22T14:17:20.757+00:00","url":"https://junglewise.ai/threats/cve-2026-52863-nlnet-labs-unbound-use-after-free-in-respip-and-dns64-modules"},{"cve":"CVE-2026-50252","cvss":5.7,"slug":"cve-2026-50252-nlnet-labs-unbound-dns-cache-poisoning-via-predictable-udp-source","title":"NLnet Labs Unbound DNS cache poisoning via predictable UDP source ports","severity":"info","exploited":false,"published_at":"2026-07-22T14:17:20.627+00:00","url":"https://junglewise.ai/threats/cve-2026-50252-nlnet-labs-unbound-dns-cache-poisoning-via-predictable-udp-source"},{"cve":"CVE-2026-50251","cvss":5.3,"slug":"cve-2026-50251-nlnet-labs-unbound-cache-flush-via-0-0-0-0-glue-records","title":"NLnet Labs Unbound cache flush via 0.0.0.0 glue records","severity":"medium","exploited":false,"published_at":"2026-07-22T14:17:20.503+00:00","url":"https://junglewise.ai/threats/cve-2026-50251-nlnet-labs-unbound-cache-flush-via-0-0-0-0-glue-records"},{"cve":"CVE-2026-50248","cvss":6.5,"slug":"cve-2026-50248-nlnet-labs-unbound-insufficient-verification-of-xfr-endpoints-in","title":"NLnet Labs Unbound insufficient verification of XFR endpoints in RPZ zones","severity":"medium","exploited":false,"published_at":"2026-07-22T14:17:20.37+00:00","url":"https://junglewise.ai/threats/cve-2026-50248-nlnet-labs-unbound-insufficient-verification-of-xfr-endpoints-in"},{"cve":"CVE-2026-50243","cvss":6.3,"slug":"cve-2026-50243-nlnet-labs-unbound-dnssec-validation-bypass-in-respip-module","title":"NLnet Labs Unbound DNSSEC validation bypass in respip module","severity":"info","exploited":false,"published_at":"2026-07-22T14:17:20.24+00:00","url":"https://junglewise.ai/threats/cve-2026-50243-nlnet-labs-unbound-dnssec-validation-bypass-in-respip-module"},{"cve":"CVE-2026-50046","cvss":5.9,"slug":"cve-2026-50046-nlnet-labs-unbound-use-after-free-in-dns-over-tls-forwarding","title":"NLnet Labs Unbound use-after-free in DNS-over-TLS forwarding","severity":"medium","exploited":false,"published_at":"2026-07-22T14:17:20.117+00:00","url":"https://junglewise.ai/threats/cve-2026-50046-nlnet-labs-unbound-use-after-free-in-dns-over-tls-forwarding"},{"cve":"CVE-2026-50045","cvss":5.3,"slug":"cve-2026-50045-nlnet-labs-unbound-network-amplification-via-global-quota-bypass","title":"NLnet Labs Unbound network amplification via global quota bypass","severity":"medium","exploited":false,"published_at":"2026-07-22T14:17:19.987+00:00","url":"https://junglewise.ai/threats/cve-2026-50045-nlnet-labs-unbound-network-amplification-via-global-quota-bypass"},{"cve":"CVE-2026-46582","cvss":3.7,"slug":"cve-2026-46582-nlnet-labs-unbound-dns-cache-poisoning-via-wildcard-replay","title":"NLnet Labs Unbound DNS cache poisoning via wildcard replay","severity":"low","exploited":false,"published_at":"2026-07-22T14:17:19.397+00:00","url":"https://junglewise.ai/threats/cve-2026-46582-nlnet-labs-unbound-dns-cache-poisoning-via-wildcard-replay"},{"cve":"CVE-2026-44690","cvss":7.5,"slug":"cve-2026-44690-nlnet-labs-unbound-cache-poisoning-via-aggressive-nsec-processing","title":"NLnet Labs Unbound cache poisoning via aggressive NSEC processing","severity":"high","exploited":false,"published_at":"2026-07-22T14:17:19.153+00:00","url":"https://junglewise.ai/threats/cve-2026-44690-nlnet-labs-unbound-cache-poisoning-via-aggressive-nsec-processing"},{"cve":"CVE-2026-44687","cvss":3.7,"slug":"cve-2026-44687-nlnet-labs-unbound-off-by-one-error-in-harden-below-nxdomain","title":"NLnet Labs Unbound off-by-one error in harden-below-nxdomain","severity":"low","exploited":false,"published_at":"2026-07-22T14:17:19.04+00:00","url":"https://junglewise.ai/threats/cve-2026-44687-nlnet-labs-unbound-off-by-one-error-in-harden-below-nxdomain"}],"vendor":{"hub":true,"name":"NLnet Labs","slug":"nlnet-labs","homepage":"https://nlnetlabs.nl/","description":"NLnet Labs is a non-profit foundation that develops open-source software and protocols for the core of the Internet.","url":"https://junglewise.ai/threats/vendors/nlnet-labs"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":26},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":2,"exploited":0,"vulnerabilities":7},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-81642","cvss":9.8,"epss":0.0096,"slug":"cve-2026-81642-nlnet-labs-unbound-dnssec-validator-buffer-overflow","title":"NLnet Labs Unbound DNSSEC validator buffer overflow","severity":"critical","exploited":false,"published_at":"2026-09-16T09:17:06.32+00:00","url":"https://junglewise.ai/threats/cve-2026-81642-nlnet-labs-unbound-dnssec-validator-buffer-overflow"},{"cve":"CVE-2026-82717","cvss":9.8,"epss":0.0078,"slug":"cve-2026-82717-nlnet-labs-unbound-heap-buffer-overflow-in-cname-synthesis","title":"NLnet Labs Unbound heap buffer overflow in CNAME synthesis","severity":"critical","exploited":false,"published_at":"2026-09-16T09:17:06.55+00:00","url":"https://junglewise.ai/threats/cve-2026-82717-nlnet-labs-unbound-heap-buffer-overflow-in-cname-synthesis"},{"cve":"CVE-2026-81634","cvss":7.5,"epss":0.0048,"slug":"cve-2026-81634-nlnet-labs-unbound-heap-buffer-overflow-in-rrset-canonicalisation","title":"NLnet Labs Unbound heap buffer overflow in RRSet canonicalisation","severity":"high","exploited":false,"published_at":"2026-09-16T09:17:06.21+00:00","url":"https://junglewise.ai/threats/cve-2026-81634-nlnet-labs-unbound-heap-buffer-overflow-in-rrset-canonicalisation"},{"cve":"CVE-2026-49234","cvss":7.5,"epss":0.0033,"slug":"cve-2026-49234-nlnet-labs-routinator-denial-of-service-via-malformed-asn-query","title":"NLnet Labs Routinator denial of service via malformed ASN query parameter","severity":"high","exploited":false,"published_at":"2026-06-08T15:16:48.08+00:00","url":"https://junglewise.ai/threats/cve-2026-49234-nlnet-labs-routinator-denial-of-service-via-malformed-asn-query"},{"cve":"CVE-2026-55973","cvss":7.5,"slug":"cve-2026-55973-nlnet-labs-unbound-stack-overflow-in-dns-error-reporting","title":"NLnet Labs Unbound stack overflow in DNS error reporting","severity":"high","exploited":false,"published_at":"2026-07-22T14:17:21.663+00:00","url":"https://junglewise.ai/threats/cve-2026-55973-nlnet-labs-unbound-stack-overflow-in-dns-error-reporting"},{"cve":"CVE-2026-44690","cvss":7.5,"slug":"cve-2026-44690-nlnet-labs-unbound-cache-poisoning-via-aggressive-nsec-processing","title":"NLnet Labs Unbound cache poisoning via aggressive NSEC processing","severity":"high","exploited":false,"published_at":"2026-07-22T14:17:19.153+00:00","url":"https://junglewise.ai/threats/cve-2026-44690-nlnet-labs-unbound-cache-poisoning-via-aggressive-nsec-processing"},{"cve":"CVE-2026-40691","cvss":7.5,"slug":"cve-2026-40691-nlnet-labs-unbound-heap-overflow-in-dnscrypt-tcp-handler","title":"NLnet Labs Unbound heap overflow in DNSCrypt TCP handler","severity":"high","exploited":false,"published_at":"2026-07-22T14:17:18.437+00:00","url":"https://junglewise.ai/threats/cve-2026-40691-nlnet-labs-unbound-heap-overflow-in-dnscrypt-tcp-handler"},{"cve":"CVE-2026-32665","cvss":7.5,"slug":"cve-2026-32665-nlnet-labs-unbound-denial-of-service-in-dns-over-quic","title":"NLnet Labs Unbound denial of service in DNS-over-QUIC","severity":"high","exploited":false,"published_at":"2026-07-22T14:17:18.193+00:00","url":"https://junglewise.ai/threats/cve-2026-32665-nlnet-labs-unbound-denial-of-service-in-dns-over-quic"},{"cve":"CVE-2026-49233","cvss":4,"epss":0.005,"slug":"cve-2026-49233-nlnet-labs-routinator-path-traversal-in-rsync-uri-module","title":"NLnet Labs Routinator path traversal in rsync URI module component","severity":"high","exploited":false,"published_at":"2026-06-08T15:16:47.693+00:00","url":"https://junglewise.ai/threats/cve-2026-49233-nlnet-labs-routinator-path-traversal-in-rsync-uri-module"},{"cve":"CVE-2026-49235","cvss":4,"epss":0.0046,"slug":"cve-2026-49235-nlnet-labs-routinator-denial-of-service-via-crafted-rrdp-dtd","title":"NLnet Labs Routinator denial of service via crafted RRDP DTD","severity":"high","exploited":false,"published_at":"2026-06-08T15:16:48.35+00:00","url":"https://junglewise.ai/threats/cve-2026-49235-nlnet-labs-routinator-denial-of-service-via-crafted-rrdp-dtd"}],"generated_at":"2026-09-26T20:07:00.238639+00:00","technologies":[{"name":"NLnet Labs Unbound","slug":"unbound","vulnerabilities":42,"url":"https://junglewise.ai/threats/technologies/unbound"},{"name":"NLnet Labs Routinator","slug":"routinator","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/routinator"}]}