CVE-2026-97206

Vendor

Debian

Product

dnsmasq / Unbound / PowerDNS

CVSS

7.5

EPSS

0.003 (p27)

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 32
   Debian advisory Debian 9d ago

   unbound - security update

   Multiple security vulnerabilities were discovered in Unbound, a validating, recursive, caching DNS resolver. CVE-2026-35501 (DNSSEC) Bypass of a configured island trust anchor underneath an insecure parent from an…

   CVE-2026-35501CVE-2026-50106CVE-2026-96405+2 more Debian
2. 28
   CVE NVD 11d ago

   NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under…

   NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter…

   CVSS 7.5 CVE-2026-97206