CVE-2026-35501

Vendor

Debian

Product

dnsmasq / Unbound / PowerDNS

CVSS

3.7

EPSS

0.003 (p27)

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 32
   Debian advisory Debian 9d ago

   unbound - security update

   Multiple security vulnerabilities were discovered in Unbound, a validating, recursive, caching DNS resolver. CVE-2026-35501 (DNSSEC) Bypass of a configured island trust anchor underneath an insecure parent from an…

   CVE-2026-35501CVE-2026-50106CVE-2026-96405+2 more Debian
2. 18
   CVE NVD 11d ago

   When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an…

   When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent is provably insecure under the root chain…

   CVSS 3.7 CVE-2026-35501