CVE Explorer

CVE-2026-42960

NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section. Promiscuous RRSets that complement DNS replies in the authority section can be used to trick Unbound to cache such records. If an adversary is able to attach such records in a reply (i.e., spoofed packet, fragmentation attack) he would be able to poison Unbound's cache. A malicious actor can exploit the possible poisonous effect by injecting RRSets other than NS tha

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:6e0aa88b59d88c172d7de33314d163a21b5ccca088e3892d4a319c034140fd46

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"defaultStatus":"unaffected","product":"Unbound","vendor":"NLnet Labs","versions":[{"lessThan":"1.25.1","status":"affected","version":"0","versionType":"semver"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:01f9d195fc0ec8f0771703c6ebd2b2ad025a0ceeac3f421bbbcfb9409412d376 · sha256:e3b60b3f11a920fb… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":5.7,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:H/E:P/U:Amber","version":"4.0"},"metric_type":"cvssV4_0"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:01f9d195fc0ec8f0771703c6ebd2b2ad025a0ceeac3f421bbbcfb9409412d376 · sha256:e3b60b3f11a920fb… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion

{"cweId":"CWE-349","description":"CWE-349: Acceptance of Extraneous Untrusted Data With Trusted Data","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:01f9d195fc0ec8f0771703c6ebd2b2ad025a0ceeac3f421bbbcfb9409412d376 · sha256:e3b60b3f11a920fb… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion

{"tags":["vendor-advisory"],"url":"https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-42960.txt"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:01f9d195fc0ec8f0771703c6ebd2b2ad025a0ceeac3f421bbbcfb9409412d376 · sha256:e3b60b3f11a920fb… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer