Stichting NLnet Labs Unbound

Name: Stichting NLnet Labs Unbound
Brand: Stichting NLnet Labs

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

8critical14high9medium0low

updated 2026-10-27

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-16866US	high7.5	3.51% (89th)	—	no fix	2019-10-03	≤ 1.9.4
CVE-2019-18934US	high7.3	3.20% (88th)	—	no fix	2019-11-19	1.6.4 → 1.9.4
CVE-2019-25042US	critical9.8	2.88% (87th)	—	no fix	2021-04-27	≤ 1.9.5
CVE-2019-25039US	critical9.8	2.88% (87th)	—	no fix	2021-04-27	≤ 1.9.5
CVE-2019-25035US	critical9.8	2.88% (87th)	—	no fix	2021-04-27	≤ 1.9.5
CVE-2019-25034US	critical9.8	2.88% (87th)	—	no fix	2021-04-27	≤ 1.9.5
CVE-2019-25032US	critical9.8	2.88% (87th)	—	no fix	2021-04-27	≤ 1.9.5
CVE-2019-25038US	critical9.8	2.81% (86th)	—	no fix	2021-04-27	≤ 1.9.5
CVE-2024-1931US	high7.5	2.52% (85th)	—	no fix	2024-03-07	1.18.0 → 1.19.1
CVE-2019-25033US	critical9.8	2.37% (84th)	—	no fix	2021-04-27	≤ 1.9.5
CVE-2019-25041US	high7.5	2.15% (82nd)	—	no fix	2021-04-27	≤ 1.9.5
CVE-2019-25037US	high7.5	2.15% (82nd)	—	no fix	2021-04-27	≤ 1.9.5
CVE-2019-25040US	high7.5	2.07% (81st)	—	no fix	2021-04-27	≤ 1.9.5
CVE-2019-25036US	high7.5	2.07% (81st)	—	no fix	2021-04-27	≤ 1.9.5
CVE-2024-33655US	—	1.74% (78th)	—	no fix	2024-06-06	≤ 1.20.0 rc1
CVE-2019-25031US	medium5.9	1.68% (77th)	—	no fix	2021-04-27	≤ 1.9.5
CVE-2022-3204US	high7.5	1.65% (76th)	—	no fix	2022-09-26	≤ 1.16.2
CVE-2026-33278US	critical9.8	1.42% (73rd)	—	no fix	2026-05-20	1.19.1 → 1.25.1
CVE-2020-10772US	high7.5	1.35% (71st)	—	no fix	2020-11-27	≤ 1.6.6-5
CVE-2022-30699US	medium6.5	1.16% (67th)	—	no fix	2022-08-01	≤ 1.16.2
CVE-2022-30698US	medium6.5	1.16% (67th)	—	no fix	2022-08-01	≤ 1.16.2
CVE-2026-42944US	high7.5	0.84% (58th)	—	no fix	2026-05-20	≤ 1.25.1
CVE-2026-42959US	high7.5	0.81% (57th)	—	no fix	2026-05-20	≤ 1.25.1
CVE-2024-8508US	medium5.3	0.80% (56th)	—	no fix	2024-10-03	≤ 1.21.1
CVE-2026-41292US	high7.5	0.75% (55th)	—	no fix	2026-05-20	≤ 1.25.1
CVE-2026-44390US	medium5.3	0.65% (51st)	—	no fix	2026-05-20	≤ 1.25.1
CVE-2026-42534US	medium5.3	0.60% (49th)	—	no fix	2026-05-20	≤ 1.25.1
CVE-2020-28935US	medium5.5	0.49% (42nd)	—	no fix	2020-12-07	≤ 1.13.0
CVE-2024-43167US	—	0.39% (33rd)	—	no fix	2024-08-12	1.19.0 → 1.21.0rc1
CVE-2026-42923US	medium5.3	0.34% (27th)	—	no fix	2026-05-20	≤ 1.25.1
CVE-2025-11411US	—	0.33% (26th)	—	no fix	2025-10-22	≤ 1.19.2
CVE-2024-1488US	high7.3OT elevated	0.32% (25th)	—	no fix	2024-02-15	≤ 1.19.1
CVE-2024-43168US	—	0.31% (24th)	—	no fix	2024-08-12	1.19.0 → 1.20.0rc1
CVE-2026-44608US	medium5.9	0.26% (17th)	—	no fix	2026-05-20	≤ 1.25.1
CVE-2025-5994US	—	0.22% (12th)	—	no fix	2025-07-16	≤ 1.23.0
CVE-2026-40622US	high7.5	0.14% (4th)	—	no fix	2026-05-20	1.16.2 → 1.25.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-190Integer Overflow or Wraparound5 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-407Inefficient Algorithmic Complexity3 CVEs
CWE-617Reachable Assertion3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-1050Excessive Platform Resource Consumption within a Loop2 CVEs
CWE-349Acceptance of Extraneous Untrusted Data With Trusted Data2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)36 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan