<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-08T03:44:21.468516+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/11369994-4f4f-48b8-a472-fc4f828efcf4/export</id>
    <title>11369994-4f4f-48b8-a472-fc4f828efcf4</title>
    <updated>2026-10-08T03:44:21.495612+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "11369994-4f4f-48b8-a472-fc4f828efcf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mw6gwypx5u23", "content": "\ud83d\udccc CVE-2026-81642 - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote... https://www.cyberhub.blog/cves/CVE-2026-81642", "creation_timestamp": "2026-09-23T09:37:06.705513Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/11369994-4f4f-48b8-a472-fc4f828efcf4/export"/>
    <published>2026-09-23T09:37:06.705513+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fc49e21d-0a44-450b-8d17-ed2429ec0e8f/export</id>
    <title>fc49e21d-0a44-450b-8d17-ed2429ec0e8f</title>
    <updated>2026-10-08T03:44:21.497159+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fc49e21d-0a44-450b-8d17-ed2429ec0e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mvxwtybleh2q", "content": "Unbound DNS resolver before 1.26.1 has a critical heap overflow in DNSSEC validation, risking remote code execution. Update to 1.26.1 to fix CVE-2026-81642.", "creation_timestamp": "2026-09-20T19:33:07.429386Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fc49e21d-0a44-450b-8d17-ed2429ec0e8f/export"/>
    <published>2026-09-20T19:33:07.429386+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/75a1de96-239b-4c31-ab0d-c27e12b0c81e/export</id>
    <title>75a1de96-239b-4c31-ab0d-c27e12b0c81e</title>
    <updated>2026-10-08T03:44:21.497295+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "75a1de96-239b-4c31-ab0d-c27e12b0c81e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81642", "type": "seen", "source": "https://bsky.app/profile/kalika.de/post/3mvwgvmxgxm2y", "content": "Unbound bis 1.26.0: Kritische 9.8-Schwachstelle im DNSSEC-Validator beheben\n\nCVE-2026-81642: Heap-Overflow im DNSSEC-Validator von Unbound bis 1.26.0 erlaubt Denial of Service und m\u00f6gliche Remotecodeausf\u00fchrung. So...\n\nhttps://www.kalika.de/posts/critical-9-8-vulnerability-cve-2026-81642-in-unbound/", "creation_timestamp": "2026-09-20T05:15:04.479545Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/75a1de96-239b-4c31-ab0d-c27e12b0c81e/export"/>
    <published>2026-09-20T05:15:04.479545+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/86f73431-15eb-4caa-a070-1316614136bc/export</id>
    <title>86f73431-15eb-4caa-a070-1316614136bc</title>
    <updated>2026-10-08T03:44:21.497403+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "86f73431-15eb-4caa-a070-1316614136bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81642", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvryg3zmyp2c", "content": "Unbound 1.26.1 patches a critical DNSSEC heap overflow. All versions before 1.26.1 are affected; RCE is possible via\u2026 https://0daynews.com/articles/2026-09-18-unbound-cve-2026-81642-dnssec-rce/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-2372", "creation_timestamp": "2026-09-18T10:45:10.605216Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/86f73431-15eb-4caa-a070-1316614136bc/export"/>
    <published>2026-09-18T10:45:10.605216+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9422e235-12e5-4c36-8557-35715e0738d9/export</id>
    <title>9422e235-12e5-4c36-8557-35715e0738d9</title>
    <updated>2026-10-08T03:44:21.497504+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9422e235-12e5-4c36-8557-35715e0738d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvr722ilhl2u", "content": "\ud83e\udd16 CVE-2026-81642: critical heap overflow in Unbound's DNSSEC validator (&amp;lt; 1.26.1). A malicious DNS zone can trigger RCE on vulnerable resolvers. Patched in 1.26.1.\nhttps://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html", "creation_timestamp": "2026-09-18T03:11:02.733391Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9422e235-12e5-4c36-8557-35715e0738d9/export"/>
    <published>2026-09-18T03:11:02.733391+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ec3d5b56-ae4e-4f20-84e2-34b37f950355/export</id>
    <title>ec3d5b56-ae4e-4f20-84e2-34b37f950355</title>
    <updated>2026-10-08T03:44:21.497609+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ec3d5b56-ae4e-4f20-84e2-34b37f950355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvqtkesfk72c", "content": "Unbound DNSSEC validator before 1.26.1 has a critical heap overflow that can enable remote code execution via a malicious DNS zone. Version 1.26.1 fixes CVE-2026-81642 and other flaws. #Unbound #CVE-2026-81642 #NLnetLabs", "creation_timestamp": "2026-09-17T23:45:25.852464Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ec3d5b56-ae4e-4f20-84e2-34b37f950355/export"/>
    <published>2026-09-17T23:45:25.852464+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9e165f15-92fd-480a-9c9a-af8828b9dcc5/export</id>
    <title>9e165f15-92fd-480a-9c9a-af8828b9dcc5</title>
    <updated>2026-10-08T03:44:21.497706+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9e165f15-92fd-480a-9c9a-af8828b9dcc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html", "content": "Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an&amp;nbsp;advisory&amp;nbsp;on Wednesday.\n\nAn attacker who controls a malicious zone and queries a vulnerable resolver can trigger it, enabling remote code execution.\n\nUnbound 1.26.1, released the same day, fixes the bug, tracked as&amp;nbsp;CVE-2026-81642, along with", "creation_timestamp": "2026-09-17T16:01:17.825643Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9e165f15-92fd-480a-9c9a-af8828b9dcc5/export"/>
    <published>2026-09-17T16:01:17.825643+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f773b105-193b-44f4-9806-c90bdab152e6/export</id>
    <title>f773b105-193b-44f4-9806-c90bdab152e6</title>
    <updated>2026-10-08T03:44:21.497819+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f773b105-193b-44f4-9806-c90bdab152e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvpwd44gwt2g", "content": "\ud83e\udd16 CVE-2026-81642: critical heap overflow in Unbound's DNSSEC validator \u2014 a malicious zone can achieve RCE on vulnerable resolvers. Fixed in 1.26.1.\nhttps://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html", "creation_timestamp": "2026-09-17T15:02:22.903473Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f773b105-193b-44f4-9806-c90bdab152e6/export"/>
    <published>2026-09-17T15:02:22.903473+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5ce15e6d-112a-4adf-b168-1f2f5ea7f55a/export</id>
    <title>5ce15e6d-112a-4adf-b168-1f2f5ea7f55a</title>
    <updated>2026-10-08T03:44:21.497915+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5ce15e6d-112a-4adf-b168-1f2f5ea7f55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mvprwnaoah2r", "content": "Unbound\u2019s validator bug (CVE-2026-81642) up to v1.26.0 allows RCE\u2014update to 1.26.1 now #Security #DNSSEC #Unbound #CVE2026 #Vulnerability #RCE https://thedailytechfeed.com/unbound-dnssec-validator-fixes-critical-rce-bug-in-1-26-1/", "creation_timestamp": "2026-09-17T13:43:49.779057Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5ce15e6d-112a-4adf-b168-1f2f5ea7f55a/export"/>
    <published>2026-09-17T13:43:49.779057+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b43c0038-3285-45e0-bc75-10d1a8f8b09d/export</id>
    <title>b43c0038-3285-45e0-bc75-10d1a8f8b09d</title>
    <updated>2026-10-08T03:44:21.498010+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b43c0038-3285-45e0-bc75-10d1a8f8b09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmvfkea2b2n", "content": "\ud83d\udea8 CVE-2026-81642 \u2014 CVSS 9.1 CRITICAL\n\nIn NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that en...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81642\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T10:07:51.676414Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b43c0038-3285-45e0-bc75-10d1a8f8b09d/export"/>
    <published>2026-09-16T10:07:51.676414+00:00</published>
  </entry>
</feed>
