CVE record · 2 sources
CVE-2026-109125
CVSS 5.3In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0'…
- Vendor
- Apple
- Product
- ios
- CVSS
- 5.3
- EPSS
- 0.003 (p27)
- Exposure class
- Edge / VPN / firewall, Mobile OS
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
unbound - security update
Multiple security vulnerabilities were discovered in Unbound, a validating, recursive, caching DNS resolver. CVE-2026-35501 (DNSSEC) Bypass of a configured island trust anchor underneath an insecure parent from an…
-
In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0'…
In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0' configurations (not a default configuration). If a response-like UDP datagram…