CVE-2026-55973

Vendor

Canonical, Microsoft

Product

dnsmasq / Unbound / PowerDNS

CVSS

7.5

EPSS

0.003 (p21)

Exposure class

Operating system, Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 53
   Ubuntu notice Ubuntu 4h ago

   Unbound vulnerabilities

   USN-8946-1 fixed vulnerabilities in Unbound in Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 14.04 LTS. This update provides the corresponding update for…

   CVE-2026-80225CVE-2026-81634CVE-2026-85501+5 more Canonical
2. 34
   CVE NVD 22 Jul 2026

   In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option (code 18) from the…

   In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option (code 18) from the last upstream response is read and uses the option's length as the length of the…

   CVSS 7.5 CVE-2026-55973
3. 20
   Advisory MSRC 23 Jul 2026

   CVE-2026-55973 'dns-error-reporting: yes' leads to stack buffer overflow

   Information published.

   CVE-2026-55973 Microsoft