MNBSD-2026-14: Vulnerability in unbound DNS

Description

Additional fix for CVE-2025-11411 (possible domain hijacking attack), to include YXDOMAIN and non-referral nodata answers in the mitigation as well, reported by TaoFei Guo from Peking University, Yang Luo and JianJun Chen from Tsinghua University.

Affected Versions

unbound

Specific versions:

• 4.0.0
• 4.0.1
• 4.0.2
• 4.0.3
• 4.0.4
• 4.0.5

Recommendations

No specific recommendations provided.

References

• https://www.cve.org/CVERecord?id=CVE-2025-11411

Additional Information

Aliases: CVE-2025-11411

Published: May 21, 2026
Last Modified: May 21, 2026