Vulnerability in Nlnet Labs Unbound
CVE-2026-50252
In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When resolver load balancing policies depend on the source port…
Affected products
- Nlnet Labs Unbound — versions 1.4.22
Weakness classification (CWE)
References
- sep@nlnetlabs.nl (vendor-advisory)