MNBSD-2026-47: crash during DNSSEC validation of malicious content

Description

DNSSEC validation of malicious content can crash unbound (Denial of Service). Reported by Qifan Zhang, Palo Alto Networks.

Affected Versions

unbound

Recommendations

No specific recommendations provided.

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-42959
• https://nlnetlabs.nl/projects/unbound/security-advisories/

Additional Information

Aliases: CVE-2026-42959

Published: June 11, 2026
Last Modified: June 11, 2026