{"type":"bundle","id":"bundle--680d0c66-6ff2-5574-a4cc-f0bbd2ef5cef","objects":[{"type":"campaign","spec_version":"2.1","id":"campaign--ec015c04-71ad-5c56-b236-de53b487c744","created":"2026-09-20T13:02:24.592Z","modified":"2026-09-20T13:02:09.832Z","name":"Unbound DNSKEY digest overflow can RCE resolvers","description":"NLnet Labs Unbound through 1.26.0 can overflow a digest buffer while validating a malicious DNSKEY (owner compression pointer into its own RDATA), enabling DoS and possible remote code execution when the resolver digests attacker-controlled zone data. Upgrade to Unbound 1.26.1 or later.","aliases":["CVE-2026-81642","Unbound DNSKEY RCE"],"first_seen":"2026-09-16T08:43:17.995Z","last_seen":"2026-09-16T12:00:00.000Z","objective":"Defensive public threat-intelligence record; see limitations and source references.","external_references":[{"source_name":"NLnet Labs Unbound CVE-2026-81642 advisory","url":"https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-81642.txt"},{"source_name":"HOL Guard operator write-up","url":"https://hol.org/blog/cve-2026-81642-unbound-dnskey-digest-rce"}]}]}