CVE-2026-44690

Vendor

Canonical, Microsoft

Product

dnsmasq / Unbound / PowerDNS

CVSS

7.5

EPSS

0.003 (p21)

Exposure class

Operating system, Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 53
   Ubuntu notice Ubuntu 4h ago

   Unbound vulnerabilities

   USN-8946-1 fixed vulnerabilities in Unbound in Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 14.04 LTS. This update provides the corresponding update for…

   CVE-2026-80225CVE-2026-81634CVE-2026-85501+5 more Canonical
2. 34
   CVE NVD 22 Jul 2026

   In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during…

   In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cache poisoning that permits a…

   CVSS 7.5 CVE-2026-44690
3. 20
   Advisory MSRC 23 Jul 2026

   CVE-2026-44690 Cross-zone wildcard cache poisoning via RRSIG.labels manipulation

   Information published.

   CVE-2026-44690 Microsoft