https://vulnerability.circl.lu/sightings/feed 2026-09-17T17:48:57.877544+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9e165f15-92fd-480a-9c9a-af8828b9dcc5/export 2026-09-17T17:48:57.902169+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9e165f15-92fd-480a-9c9a-af8828b9dcc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html", "content": "Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory on Wednesday.\n\nAn attacker who controls a malicious zone and queries a vulnerable resolver can trigger it, enabling remote code execution.\n\nUnbound 1.26.1, released the same day, fixes the bug, tracked as CVE-2026-81642, along with", "creation_timestamp": "2026-09-17T16:01:17.825643Z"} 2026-09-17T16:01:17.825643+00:00 https://vulnerability.circl.lu/sighting/f773b105-193b-44f4-9806-c90bdab152e6/export 2026-09-17T17:48:57.905202+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f773b105-193b-44f4-9806-c90bdab152e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvpwd44gwt2g", "content": "\ud83e\udd16 CVE-2026-81642: critical heap overflow in Unbound's DNSSEC validator \u2014 a malicious zone can achieve RCE on vulnerable resolvers. Fixed in 1.26.1.\nhttps://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html", "creation_timestamp": "2026-09-17T15:02:22.903473Z"} 2026-09-17T15:02:22.903473+00:00 https://vulnerability.circl.lu/sighting/5ce15e6d-112a-4adf-b168-1f2f5ea7f55a/export 2026-09-17T17:48:57.905413+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5ce15e6d-112a-4adf-b168-1f2f5ea7f55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mvprwnaoah2r", "content": "Unbound\u2019s validator bug (CVE-2026-81642) up to v1.26.0 allows RCE\u2014update to 1.26.1 now #Security #DNSSEC #Unbound #CVE2026 #Vulnerability #RCE https://thedailytechfeed.com/unbound-dnssec-validator-fixes-critical-rce-bug-in-1-26-1/", "creation_timestamp": "2026-09-17T13:43:49.779057Z"} 2026-09-17T13:43:49.779057+00:00 https://vulnerability.circl.lu/sighting/b43c0038-3285-45e0-bc75-10d1a8f8b09d/export 2026-09-17T17:48:57.905579+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b43c0038-3285-45e0-bc75-10d1a8f8b09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmvfkea2b2n", "content": "\ud83d\udea8 CVE-2026-81642 \u2014 CVSS 9.1 CRITICAL\n\nIn NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that en...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81642\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T10:07:51.676414Z"} 2026-09-16T10:07:51.676414+00:00 https://vulnerability.circl.lu/sighting/caadd52c-58aa-4401-945b-5b88cf50fb10/export 2026-09-17T17:48:57.905750+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "caadd52c-58aa-4401-945b-5b88cf50fb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmttwtrb52t", "content": "CVE-2026-81642 - unbound\nUnbound versions up to 1.26.0 can mishandle specially crafted DNSSEC keys, causing the program to stop working or potentially run attacker code. An attacker who controls a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unbound #nlnetlabs #CVE #infosec", "creation_timestamp": "2026-09-16T09:40:07.176752Z"} 2026-09-16T09:40:07.176752+00:00 https://vulnerability.circl.lu/sighting/23f04d8e-a2fd-4081-8291-5ff62c68bcbf/export 2026-09-17T17:48:57.905905+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "23f04d8e-a2fd-4081-8291-5ff62c68bcbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81642", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvmrn45c3b2a", "content": "CRITICAL heap-based buffer overflow in NLnet Labs Unbound (\u22641.26.0) risks RCE via DNSSEC validator. Update to 1.26.1+ immediately. More info: https://radar.offseq.com/threat/cve-2026-81642-cwe-122-heap-based-buffer-overflow-in-nlnet-labs-unbound-2ab04cc5a0313c65 #OffSeq #Unbound #Security", "creation_timestamp": "2026-09-16T09:00:32.265036Z"} 2026-09-16T09:00:32.265036+00:00 https://vulnerability.circl.lu/sighting/b9d41052-54ba-4a7b-9f1c-d9ef45a7cb46/export 2026-09-17T17:48:57.906026+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b9d41052-54ba-4a7b-9f1c-d9ef45a7cb46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81642", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117279898097004138", "content": "CVE-2026-81642: CRITICAL heap buffer overflow in NLnet Labs Unbound \u22641.26.0. Exploitable via DNSKEY with owner compression pointer \u2014 possible DoS & RCE. Patch ASAP. https://radar.offseq.com/threat/cve-2026-81642-cwe-122-heap-based-buffer-overflow-in-nlnet-labs-unbound-2ab04cc5a0313c65 #OffSeq #DNS #Unbound #Vuln #RCE", "creation_timestamp": "2026-09-16T09:00:27.088673Z"} 2026-09-16T09:00:27.088673+00:00