Unbound (CVE-2026-33278)

fln

Administrator
Staff member
Joined
Aug 30, 2021
Messages
1,371
There is a new high score security vulnerability CVE-2026-33278 for the unbound local DNS server. Please make sure to track the updates from the Linux distribution providers and update the systems as soon as new builds for unbound are released.

Debian systems: https://security-tracker.debian.org/tracker/CVE-2026-33278
RHEL systems: https://access.redhat.com/security/cve/cve-2026-33278

A temporary mitigation could be to stop using the unbound service until an update is received:

Code:
da build set unbound_as_default_resolver no
da build unbound
 
Back
Top