THREAT OPS › Threat News › [NVD] CVE-2026-44390 (MEDIUM 5.3) — NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for. Malicious upstream responses with very large RRsets with records that don't share a suffix above the root can
[NVD] CVE-2026-44390 (MEDIUM 5.3) — NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for. Malicious upstream responses with very large RRsets with records that don't share a suffix above the root can
CVE-2026-44390 CVSS: 5.3 MEDIUM Published: 2026-05-20T10:16:28.183
NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for. Malicious upstream responses with very large RRsets with records that don't share a suffix above the root can cause Unbound to spend a considerable time applying
MITRE ATT&CK techniques
- CompressionT1027.015
Indicators of compromise
- CVE-2026-44390cve
- CVE-2024-8508cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-44390