{"vulnerability": "CVE-2026-81642", "sightings": [{"uuid": "b9d41052-54ba-4a7b-9f1c-d9ef45a7cb46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81642", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117279898097004138", "content": "CVE-2026-81642: CRITICAL heap buffer overflow in NLnet Labs Unbound \u22641.26.0. Exploitable via DNSKEY with owner compression pointer \u2014 possible DoS & RCE. Patch ASAP. https://radar.offseq.com/threat/cve-2026-81642-cwe-122-heap-based-buffer-overflow-in-nlnet-labs-unbound-2ab04cc5a0313c65 #OffSeq #DNS #Unbound #Vuln #RCE", "creation_timestamp": "2026-09-16T09:00:27.088673Z"}, {"uuid": "23f04d8e-a2fd-4081-8291-5ff62c68bcbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81642", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvmrn45c3b2a", "content": "CRITICAL heap-based buffer overflow in NLnet Labs Unbound (\u22641.26.0) risks RCE via DNSSEC validator. Update to 1.26.1+ immediately. More info: https://radar.offseq.com/threat/cve-2026-81642-cwe-122-heap-based-buffer-overflow-in-nlnet-labs-unbound-2ab04cc5a0313c65 #OffSeq #Unbound #Security", "creation_timestamp": "2026-09-16T09:00:32.265036Z"}, {"uuid": "caadd52c-58aa-4401-945b-5b88cf50fb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmttwtrb52t", "content": "CVE-2026-81642 - unbound\nUnbound versions up to 1.26.0 can mishandle specially crafted DNSSEC keys, causing the program to stop working or potentially run attacker code. An attacker who controls a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unbound #nlnetlabs #CVE #infosec", "creation_timestamp": "2026-09-16T09:40:07.176752Z"}, {"uuid": "b43c0038-3285-45e0-bc75-10d1a8f8b09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmvfkea2b2n", "content": "\ud83d\udea8 CVE-2026-81642 \u2014 CVSS 9.1 CRITICAL\n\nIn NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that en...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81642\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T10:07:51.676414Z"}, {"uuid": "5ce15e6d-112a-4adf-b168-1f2f5ea7f55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mvprwnaoah2r", "content": "Unbound\u2019s validator bug (CVE-2026-81642) up to v1.26.0 allows RCE\u2014update to 1.26.1 now #Security #DNSSEC #Unbound #CVE2026 #Vulnerability #RCE https://thedailytechfeed.com/unbound-dnssec-validator-fixes-critical-rce-bug-in-1-26-1/", "creation_timestamp": "2026-09-17T13:43:49.779057Z"}, {"uuid": "f773b105-193b-44f4-9806-c90bdab152e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvpwd44gwt2g", "content": "\ud83e\udd16 CVE-2026-81642: critical heap overflow in Unbound's DNSSEC validator \u2014 a malicious zone can achieve RCE on vulnerable resolvers. Fixed in 1.26.1.\nhttps://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html", "creation_timestamp": "2026-09-17T15:02:22.903473Z"}, {"uuid": "9e165f15-92fd-480a-9c9a-af8828b9dcc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81642", "type": "seen", "source": "https://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html", "content": "Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory on Wednesday.\n\nAn attacker who controls a malicious zone and queries a vulnerable resolver can trigger it, enabling remote code execution.\n\nUnbound 1.26.1, released the same day, fixes the bug, tracked as CVE-2026-81642, along with", "creation_timestamp": "2026-09-17T16:01:17.825643Z"}]}