NL
Vendor security profile
NLnet Labs
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs21
Critical2
CISA KEV0
Public exploit0
Patch rate%81
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
0
0
6
0
2
4
9
0
CVE KEV
CVE severity distribution
21toplam CVE
Critical2 (10%)
High8 (38%)
Medium10 (48%)
Low1 (5%)
Patch and exploitation view
%81
Verified patch
%0
CISA KEV
%0
Public exploit
17Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
5.3
CVE-2026-85501
Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC
NL
Patch verifiedEPSS %0
5.9
CVE-2026-82720
Use-after-free in DoH stream cleanup code path
NL
Patch verifiedEPSS %0
8.4
CVE-2026-82717
CNAME synthesis could lead to heap corruption
NL
Patch verifiedEPSS %1
9.1
CVE-2026-81642
Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
NL
Patch verifiedEPSS %1
7.5
CVE-2026-81634
Possible heap buffer overflow during DNSSEC canonicalization
NL
Patch verifiedEPSS %0
5.3
CVE-2026-80225
Possible degradation of service from continuous queries on the same TCP/DoT connection
NL
Patch verifiedEPSS %0
6.5
CVE-2026-78227
Use-after-free in DoQ stream output buffer on reset re-transmission
NL
Patch verifiedEPSS %0
4.4
CVE-2026-77955
Possible ZONEMD verification bypass window
NL
Patch verifiedEPSS %0
3.7
CVE-2026-77860
'serve-expired' can bypass Unbound 'wait-limit'
NL
Patch verifiedEPSS %0
8.2
CVE-2026-19538
Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
NL
Patch status unknownEPSS %0